app.hellofax.com/editor/view/super_group_guid/b97ebb00e0f5ed635f7b5e517a8345e08a3e22db?utm_campaign=fax_confirmation&utm_source=default&utm_channel=product_promo&utm_medium=email&utm_content=original
301 Moved Permanently 431 B URL HTTP/1.1 app.hellofax.com/editor/view/super_group_guid/b97ebb00e0f5ed635f7b5e517a8345e08a3e22db?utm_campaign=fax_confirmation&utm_source=default&utm_channel=product_promo&utm_medium=email&utm_content=original
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 8e407e350b42221eb077426caab27503
988dcdbdd1e09ac966c4874f45cfc84023c846fb
592e7577fdc2537503ab7e623cb6a179e2b8e436dd7d8dba1776adc1b687ae99
GET /editor/view/super_group_guid/b97ebb00e0f5ed635f7b5e517a8345e08a3e22db?utm_campaign=fax_confirmation&utm_source=default&utm_channel=product_promo&utm_medium=email&utm_content=original HTTP/1.1
Host: app.hellofax.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 05 Jan 2023 14:38:21 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 431
Connection: keep-alive
Set-Cookie: AWSALB=L0ppNUphG9RK591wFGeJAPgqPfdgYGae5sbcNy9jOFu/UANDljdTOcfOqvcoEgDT8vtphavcdWOoBJOugX4FtFtfjiCA1Q/8briWM7KNSnssVI4G1eygHbgzSez3; Expires=Thu, 12 Jan 2023 14:38:21 GMT; Path=/
AWSALBCORS=L0ppNUphG9RK591wFGeJAPgqPfdgYGae5sbcNy9jOFu/UANDljdTOcfOqvcoEgDT8vtphavcdWOoBJOugX4FtFtfjiCA1Q/8briWM7KNSnssVI4G1eygHbgzSez3; Expires=Thu, 12 Jan 2023 14:38:21 GMT; Path=/; SameSite=None
Server: Apache
Location: https://app.hellofax.com/editor/view/super_group_guid/b97ebb00e0f5ed635f7b5e517a8345e08a3e22db?utm_campaign=fax_confirmation&utm_source=default&utm_channel=product_promo&utm_medium=email&utm_content=original
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 326898eb925368408f6f42ee173b9d89
b8b20ee34b7e7b139e7729b8e46a54ea25f54ac8
96c2c75f700ab55649882111713ca3cfb2eaf08e404c2bc245a641dc12ae168a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "96C2C75F700AB55649882111713CA3CFB2EAF08E404C2BC245A641DC12AE168A"
Last-Modified: Wed, 04 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9949
Expires: Thu, 05 Jan 2023 17:24:11 GMT
Date: Thu, 05 Jan 2023 14:38:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ce8af3d72e7e9af609039abee59c8b87
8e1b16591fbc632df35f15e23da55ee86af31bc3
52edddbda4a3a3b778f61a491b21e6ea439e9d8024189e636b1f37b2dd7226fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52EDDDBDA4A3A3B778F61A491B21E6EA439E9D8024189E636B1F37B2DD7226FC"
Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8964
Expires: Thu, 05 Jan 2023 17:07:46 GMT
Date: Thu, 05 Jan 2023 14:38:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 225d42543c0190cdb3686bf236533f4f
13a0940800fce078487372b6b3ca614dd1ab6c31
766bbe15eb1642ac39e9b71669fbb44252471c8de5adb555cd1a76db44fbe7bc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "766BBE15EB1642AC39E9B71669FBB44252471C8DE5ADB555CD1A76DB44FBE7BC"
Last-Modified: Mon, 02 Jan 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4301
Expires: Thu, 05 Jan 2023 15:50:03 GMT
Date: Thu, 05 Jan 2023 14:38:22 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 05 Jan 2023 13:47:53 GMT
content-type: application/json
age: 3029
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Yc0vfAwpstkarPpCV1n28dFysVnl74w/imtQY4PEOMbWnY0K83tJllfJolloUdC5kFX8GjUU968=
x-amz-request-id: 5YA1XZKCTFXP55XF
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 05 Jan 2023 13:59:34 GMT
age: 2328
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 14:38:22 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 1947bcd39513c61776ffb44be7a69096
fb7d806badff943254387814aa91cad71f583385
bf80e3ac72e7fc985f9060df097c75394952d040b90101a63690c4483318b062
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 05 Jan 2023 14:38:21 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 04 Jan 2023 20:02:16 GMT
Expires: Thu, 05 Jan 2023 20:02:16 GMT
ETag: "fb7d806badff943254387814aa91cad71f583385"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
app.hellofax.com/editor/view/super_group_guid/b97ebb00e0f5ed635f7b5e517a8345e08a3e22db?utm_campaign=fax_confirmation&utm_source=default&utm_channel=product_promo&utm_medium=email&utm_content=original
200 OK 3.5 kB URL HTTP/1.1 app.hellofax.com/editor/view/super_group_guid/b97ebb00e0f5ed635f7b5e517a8345e08a3e22db?utm_campaign=fax_confirmation&utm_source=default&utm_channel=product_promo&utm_medium=email&utm_content=original
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1415)
Hash e9fbc3a2246ed53c96dadfc3680a1dd2
a4e05bd7d0ba8795514a98d916dd776dbaf34ad1
a5e87763f9a0112078643346d3bb7ccfddc9d8490c1cda46322fe4305d6593eb
GET /editor/view/super_group_guid/b97ebb00e0f5ed635f7b5e517a8345e08a3e22db?utm_campaign=fax_confirmation&utm_source=default&utm_channel=product_promo&utm_medium=email&utm_content=original HTTP/1.1
Host: app.hellofax.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 14:38:22 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 3549
Connection: keep-alive
Set-Cookie: AWSALB=x1ZGLcLUrFC03io76FLxrTRYdHpbjiaDbLcJsrTCpyoGEvtofZmqA4UAtJ9slYwRHQ5mOFsIOh1eeYnP9VHhdTlYw6RDJNX/ZHb+FnSQ3YINaFu52l5wWMiD+I3K; Expires=Thu, 12 Jan 2023 14:38:22 GMT; Path=/
AWSALBCORS=x1ZGLcLUrFC03io76FLxrTRYdHpbjiaDbLcJsrTCpyoGEvtofZmqA4UAtJ9slYwRHQ5mOFsIOh1eeYnP9VHhdTlYw6RDJNX/ZHb+FnSQ3YINaFu52l5wWMiD+I3K; Expires=Thu, 12 Jan 2023 14:38:22 GMT; Path=/; SameSite=None; Secure
hf_user=dad84f631dca5d383e09a4ed7e1c43b63d928e876b08c822be3bc447a1056c17:010b3eba0a33a3f34e689ef331ae11ffa32b74c3; path=/; domain=app.hellofax.com; secure; httponly
hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvZmF4LmNvbS9lZGl0b3Ivdmlldy9zdXBlcl9ncm91cF9ndWlkL2I5N2ViYjAwZTBmNWVkNjM1ZjdiNWU1MTdhODM0NWUwOGEzZTIyZGI/dXRtX2NhbXBhaWduPWZheF9jb25maXJtYXRpb24mdXRtX3NvdXJjZT1kZWZhdWx0JnV0bV9jaGFubmVsPXByb2R1Y3RfcHJvbW8mdXRtX21lZGl1bT1lbWFpbCZ1dG1fY29udGVudD1vcmlnaW5hbA==; expires=Sat, 04-Feb-2023 14:38:22 GMT; Max-Age=2592000; path=/; domain=hellofax.com
hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvZmF4LmNvbS9lZGl0b3Ivdmlldy9zdXBlcl9ncm91cF9ndWlkL2I5N2ViYjAwZTBmNWVkNjM1ZjdiNWU1MTdhODM0NWUwOGEzZTIyZGI/dXRtX2NhbXBhaWduPWZheF9jb25maXJtYXRpb24mdXRtX3NvdXJjZT1kZWZhdWx0JnV0bV9jaGFubmVsPXByb2R1Y3RfcHJvbW8mdXRtX21lZGl1bT1lbWFpbCZ1dG1fY29udGVudD1vcmlnaW5hbA==; expires=Sat, 04-Feb-2023 14:38:22 GMT; Max-Age=2592000; path=/; domain=hellofax.com
hs_puuid=d143aec0d62f43d784fd81a4e8277a790f9d9733; expires=Sun, 02-Jan-2033 14:38:22 GMT; Max-Age=315360000; path=/; domain=hellofax.com
deferred_login_redirect_url=https://app.hellofax.com/editor/view/super_group_guid/b97ebb00e0f5ed635f7b5e517a8345e08a3e22db?utm_campaign=fax_confirmation&utm_source=default&utm_channel=product_promo&utm_medium=email&utm_content=original; expires=Thu, 05-Jan-2023 16:08:22 GMT; Max-Age=5400; path=/; domain=hellofax.com
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: private
X-Content-Type-Options: nosniff
Referrer-Policy: origin-when-cross-origin
X-Ua-Compatible: IE=Edge
Content-Security-Policy: base-uri 'none'; connect-src 'self' https://graph.microsoft.com https://www.google-analytics.com https://stats.g.doubleclick.net https://heapanalytics.com https://api.sprig.com/sdk/ https://sentry.io https://dpiprodesntls.112.2o7.net/b/ss/dpi.prod.esntls/1/JS-2.22.0/; frame-ancestors 'self'; object-src 'none'; script-src https: https://api.userleap.com 'nonce-DtCdJLe2i9uA1RzvDkgywdrU' 'unsafe-inline' 'strict-dynamic'; style-src 'self' https://code.ionicframework.com https://*.marketo.com https://fonts.googleapis.com https://use.typekit.net https://cdn.hellosign.com 'unsafe-inline'; report-uri https://app.hellofax.com/csp_report; upgrade-insecure-requests
X-Content-Security-Policy: base-uri 'none'; connect-src 'self' https://graph.microsoft.com https://www.google-analytics.com https://stats.g.doubleclick.net https://heapanalytics.com https://api.sprig.com/sdk/ https://sentry.io https://dpiprodesntls.112.2o7.net/b/ss/dpi.prod.esntls/1/JS-2.22.0/; frame-ancestors 'self'; object-src 'none'; script-src https: https://api.userleap.com 'nonce-DtCdJLe2i9uA1RzvDkgywdrU' 'unsafe-inline' 'strict-dynamic'; style-src 'self' https://code.ionicframework.com https://*.marketo.com https://fonts.googleapis.com https://use.typekit.net https://cdn.hellosign.com 'unsafe-inline'; report-uri https://app.hellofax.com/csp_report; upgrade-insecure-requests
X-Webkit-Csp: base-uri 'none'; connect-src 'self' https://graph.microsoft.com https://www.google-analytics.com https://stats.g.doubleclick.net https://heapanalytics.com https://api.sprig.com/sdk/ https://sentry.io https://dpiprodesntls.112.2o7.net/b/ss/dpi.prod.esntls/1/JS-2.22.0/; frame-ancestors 'self'; object-src 'none'; script-src https: https://api.userleap.com 'nonce-DtCdJLe2i9uA1RzvDkgywdrU' 'unsafe-inline' 'strict-dynamic'; style-src 'self' https://code.ionicframework.com https://*.marketo.com https://fonts.googleapis.com https://use.typekit.net https://cdn.hellosign.com 'unsafe-inline'; report-uri https://app.hellofax.com/csp_report; upgrade-insecure-requests
X-Frame-Options: SAMEORIGIN
Vary: Accept-Encoding
Content-Encoding: gzip
P3P: CP="NOP3PPOLICY"
use.typekit.net/awb1ysu.js
200 OK 7.0 kB URL HTTP/2 use.typekit.net/awb1ysu.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (3716)
Hash ffd5d204b4b71c84237f93394ef873ea
86f5bf4ac86f8297929d850510cf6b50cb5b5346
4042c3268e176d973975ca9422e9a14ae2f7f60e342524a9a73eedd03fda1d8a
GET /awb1ysu.js HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.hellofax.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/javascript;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: public, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 7007
date: Thu, 05 Jan 2023 14:38:22 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 9f59bb56715ef4418133de2b094870b6
04115d1f76fab97abe6918bd2589bc998573fab4
3bc0d06ce9189be970683d7a5354f63bb2179f3f404f5a4c750daf595a597090
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5833
Cache-Control: max-age=158763
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 14:38:22 GMT
Etag: "63b69340-1d7"
Expires: Sat, 07 Jan 2023 10:44:25 GMT
Last-Modified: Thu, 05 Jan 2023 09:07:12 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Pragma, Content-Length, Alert, Expires, ETag, Last-Modified, Backoff, Content-Type, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 05 Jan 2023 14:08:11 GMT
age: 1811
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 73a99621729e1bc9e236a1085b98a0cf
5e1f71493085f6be7788f59987c1f0850b77d4d7
219d1a8d7d1a027553f72c8c024488863d8996457b31c78014002f81174f3ad1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5659
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 14:38:22 GMT
Last-Modified: Thu, 05 Jan 2023 13:04:03 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e4fdd703d4ebb3209cd70c0ffd234da1
2e3a0a6fe0e63d2991e4b8726d5a2c21406a0dc1
ff40f371b1ebac1fbc0e809a0e85f500977372f25e8a72eda450083755fef11d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 14:38:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a430d46fb27196c8b03f382c1bafbb23
0b31940d1067eb87c24c6d356689d7f9f90231a6
3e9cd331b1c2c1eca94ff12ec1b685e1c1c1909e30e8b3cf4493dc6eac786df8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 14:38:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c49ab241daf3af0512c0301e25f80623
dc42fda4ae1e2b72c2a0bef6ec98478ab175278d
f8bbcbb8777bbe4a7b5e31be3fe7d9179b0a676a63721fc88d29a216e720878b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 14:38:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/js/platform.js?onload=googlePlatformDidLoad
200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js?onload=googlePlatformDidLoad
IP
File type ASCII text, with very long lines (1429)
Hash c6ed16df114b7a21089a9e2103948d87
901705c2915ba663536043421d102d1348389a77
5f2b068cd838a7e5b93c14c8b9de424ba218894116d5de45df5214c5c95ad4e4
GET /js/platform.js?onload=googlePlatformDidLoad HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.hellofax.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20939
date: Thu, 05 Jan 2023 14:38:23 GMT
expires: Thu, 05 Jan 2023 14:38:23 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "d0a5366bade4a178"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7c8811382bcd40ec65e7a6e339e94904
38d741442c52bcdde863d1a2d593ce0c81c7efbd
ce5c1060c028784381224586783b9b0943fd14947bb15bb38e6d401a1a221c23
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 14:38:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.hellosign.com/1.140.0/build/c9a114b1339fce80ba19ff193b01ee75.png
200 OK 70 kB URL HTTP/2 cdn.hellosign.com/1.140.0/build/c9a114b1339fce80ba19ff193b01ee75.png
IP
File type PNG image data, 982 x 900, 8-bit/color RGBA, non-interlaced\012- data
Hash c9a114b1339fce80ba19ff193b01ee75
4a19a7faca8fbd26ed5a6de2dfb5b99f9aad285c
d86877e6d86a7beecfea0c017dab78e1cfaf0386923d0b4181852b1d80d150f7
GET /1.140.0/build/c9a114b1339fce80ba19ff193b01ee75.png HTTP/1.1
Host: cdn.hellosign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.hellofax.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 69489
last-modified: Thu, 15 Dec 2022 22:16:19 GMT
x-amz-version-id: 53oO3QnXxqQCRVe0ER0tcbLXH7WmPyKv
accept-ranges: bytes
server: AmazonS3
date: Thu, 05 Jan 2023 05:39:50 GMT
etag: "c9a114b1339fce80ba19ff193b01ee75"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RQwL886UmgFtFsSzbgdCgCJx1Ow8XdhExcAVT0AYGn3DzVM35lQWww==
age: 32975
X-Firefox-Spdy: h2
cdn.hellosign.com/1.140.0/build/d6ed97904b810d211cd1dd9570fb2e2c.svg
200 OK 877 B URL HTTP/2 cdn.hellosign.com/1.140.0/build/d6ed97904b810d211cd1dd9570fb2e2c.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash d6ed97904b810d211cd1dd9570fb2e2c
1dd971a554df4d343b7a5a568bb9af5fb3217a58
1daaeb9a5f8284354400639ba947a90fd0916aa1e9d39c14dc20ee81da9917ab
GET /1.140.0/build/d6ed97904b810d211cd1dd9570fb2e2c.svg HTTP/1.1
Host: cdn.hellosign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.hellofax.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 877
last-modified: Thu, 15 Dec 2022 22:16:19 GMT
x-amz-version-id: KEJg53NORYevm9C_Jt11FWXgGS0b1Q6T
accept-ranges: bytes
server: AmazonS3
date: Thu, 05 Jan 2023 01:49:47 GMT
etag: "d6ed97904b810d211cd1dd9570fb2e2c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: PyymvdbdNAoAw6-g5Hvdsy2nG6m7NxKQLvLygL152pdhV_zK02pymg==
age: 51052
X-Firefox-Spdy: h2
cdn.hellosign.com/1.140.0/build/d58ad3a77f60df89e43cefa5cffd9b98.svg
200 OK 6.4 kB URL HTTP/2 cdn.hellosign.com/1.140.0/build/d58ad3a77f60df89e43cefa5cffd9b98.svg
IP
Hash d71ed0eef1e7ab2c1d44d7f848df986d
11a3e922917d8337183ed5246a1199d84cef78da
16dbf7c08857619f4ad91dd375d33bac51c12fe0004f9beb086216469d13e661
GET /1.140.0/build/d58ad3a77f60df89e43cefa5cffd9b98.svg HTTP/1.1
Host: cdn.hellosign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.hellofax.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Thu, 15 Dec 2022 22:16:19 GMT
x-amz-version-id: e8jfCszn2zxbLPj.ggOPgCvg.xIEqiyH
server: AmazonS3
content-encoding: gzip
date: Thu, 05 Jan 2023 07:08:36 GMT
etag: W/"d58ad3a77f60df89e43cefa5cffd9b98"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: C-XFhI6lDPLRQK1ekQRqz_RajPjTGLR7ywwPvfqyV7hv_Km2pDdGfQ==
age: 27365
X-Firefox-Spdy: h2
cdn.hellosign.com/1.140.0/build/93b6f18ec99bcb7c3fa7ea570a75e240.woff2
200 OK 43 kB URL HTTP/2 cdn.hellosign.com/1.140.0/build/93b6f18ec99bcb7c3fa7ea570a75e240.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 43308, version 1.66\012- data
Hash 93b6f18ec99bcb7c3fa7ea570a75e240
60b9e3062fe532cbc18b897fac542c56a03544c7
43693f7bdd6146e783fab3f75ba0a51aa3cf9530adbf790dbd686fc8a17aa3db
GET /1.140.0/build/93b6f18ec99bcb7c3fa7ea570a75e240.woff2 HTTP/1.1
Host: cdn.hellosign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://app.hellofax.com
Connection: keep-alive
Referer: https://cdn.hellosign.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 43308
access-control-allow-origin: https://app.hellofax.com
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
last-modified: Thu, 15 Dec 2022 22:16:18 GMT
x-amz-version-id: 8d3jmdZoGz.fv8jqXmYHvJWVB0UOV4Xn
accept-ranges: bytes
server: AmazonS3
date: Thu, 05 Jan 2023 14:38:24 GMT
etag: "93b6f18ec99bcb7c3fa7ea570a75e240"
vary: Origin,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Z2RRxOYyV6kbe1nRqwbbf77sQM2m94a4GcDEIj9Uh37TYsz4APJEtQ==
age: 55217
X-Firefox-Spdy: h2
use.typekit.net/af/cebe0e/00000000000000003b9b3060/27/l?primer=55c5493cb0af14ac268acbbc7f827f5e26cbdd5d327df3c7f08f16391f40ef39&fvd=n3&v=3
200 OK 26 kB URL HTTP/2 use.typekit.net/af/cebe0e/00000000000000003b9b3060/27/l?primer=55c5493cb0af14ac268acbbc7f827f5e26cbdd5d327df3c7f08f16391f40ef39&fvd=n3&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 26204, version 1.0\012- data
Hash d694bd120befdf1790c36f947406b301
d5c01dc81b6a7156bd9f8b7db3b273df9b84ea88
61ed2d579fadb6f6ff62cec76e7563f9bd0cc83b14d2dea91cc7afd5f36f3205
GET /af/cebe0e/00000000000000003b9b3060/27/l?primer=55c5493cb0af14ac268acbbc7f827f5e26cbdd5d327df3c7f08f16391f40ef39&fvd=n3&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://app.hellofax.com
Connection: keep-alive
Referer: https://app.hellofax.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 26204
etag: "5338ba55164b46853ef64f03f037a5b8658bcdbe"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Thu, 05 Jan 2023 14:38:24 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10594
Expires: Thu, 05 Jan 2023 17:34:58 GMT
Date: Thu, 05 Jan 2023 14:38:24 GMT
Connection: keep-alive
cdn.hellosign.com/1.140.0/build/dfc5e24cbc1b134e0c00c61e84ec999a.woff2
200 OK 46 kB URL HTTP/2 cdn.hellosign.com/1.140.0/build/dfc5e24cbc1b134e0c00c61e84ec999a.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 46188, version 1.66\012- data
Hash dfc5e24cbc1b134e0c00c61e84ec999a
d3b1a8ef1d0f6f9162986479252570525719f203
b5db3e633ec765fc01a19c06b0955d56c2503285e59d8d348d08ec34abbfeaf3
GET /1.140.0/build/dfc5e24cbc1b134e0c00c61e84ec999a.woff2 HTTP/1.1
Host: cdn.hellosign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://app.hellofax.com
Connection: keep-alive
Referer: https://cdn.hellosign.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 46188
access-control-allow-origin: https://app.hellofax.com
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
last-modified: Thu, 15 Dec 2022 22:16:19 GMT
x-amz-version-id: bG0zENiYIRAjko.4eaE9kLuiuEpyBKFF
accept-ranges: bytes
server: AmazonS3
date: Thu, 05 Jan 2023 14:38:24 GMT
etag: "dfc5e24cbc1b134e0c00c61e84ec999a"
vary: Origin,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pbw_PpWtiqdkp9jw5qNwk8l54ShvzIhIElapNa-oakUY5U4m9MaYbg==
age: 20435
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10594
Expires: Thu, 05 Jan 2023 17:34:58 GMT
Date: Thu, 05 Jan 2023 14:38:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10594
Expires: Thu, 05 Jan 2023 17:34:58 GMT
Date: Thu, 05 Jan 2023 14:38:24 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa32e61e5-fcf0-4825-a1bf-ea145dd3ae6c.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa32e61e5-fcf0-4825-a1bf-ea145dd3ae6c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4cecd6a1a228ac55f193a180229d3a33
9e5fd5a101828d5491305deb539dc5836c5b3065
7bbd9e261625c2d2a700a817c2f10b779c8463baacda02f9f34161c08487ca31
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa32e61e5-fcf0-4825-a1bf-ea145dd3ae6c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8721
x-amzn-requestid: 1c24289e-6169-4088-a2b8-311e3640e4bf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eAA7IGTdIAMFzCA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63afe1e0-561d5981260c41511219c673;Sampled=0
x-amzn-remapped-date: Sat, 31 Dec 2022 07:16:48 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: qoxCvnR2nVjlCdQJ6Wyq_Ot0p1SVdhl71LEKAm0-tkPMxWHGdIl42w==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 548adcda884eed02304ba5d6a1d7f514.cloudfront.net (CloudFront), 1.1 google
date: Thu, 05 Jan 2023 07:08:44 GMT
age: 26980
etag: "9e5fd5a101828d5491305deb539dc5836c5b3065"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5507a575-db90-4030-a625-ae482beacb61.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5507a575-db90-4030-a625-ae482beacb61.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 165bf3d40f0584e3b9839304ede47c76
27da520440229f2239721371d9338eb81a8b4b93
00075a96a87b16edb302ccc862e0dc9691c7195ac227ae805bc88ebe8dd3ee52
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5507a575-db90-4030-a625-ae482beacb61.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9690
x-amzn-requestid: eba6ad45-abca-4781-88d0-28514de35851
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ePMB5GxGIAMFZcA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b5f3a5-2f3844833b7ead4f7121ae11;Sampled=0
x-amzn-remapped-date: Wed, 04 Jan 2023 21:46:13 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AUNmGdRW5uyYG9Yiwi4ZR7Ss-aD5k5FuDgyHAgnuJgmtG-S2WQ4T6w==
via: 1.1 536063cb28bfc05fcb7a78183dd89b72.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 21:57:37 GMT
age: 60047
etag: "27da520440229f2239721371d9338eb81a8b4b93"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10594
Expires: Thu, 05 Jan 2023 17:34:58 GMT
Date: Thu, 05 Jan 2023 14:38:24 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 919b535021d30c9098688cb17382d0e4
bcfb714cf4742722bc7c3064c4f47ad615d1b099
28f6572d1b88635919f42d0192582cb8e49f2b786f6c464d1dd46c7c9b68646c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6548
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 14:38:24 GMT
Last-Modified: Thu, 05 Jan 2023 12:49:16 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 279
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb16f641-0924-4c5c-9f83-6779c59c746a.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb16f641-0924-4c5c-9f83-6779c59c746a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7711a1490729319952a150b84e91a5d6
11fda31d48a4df3fd6346d92f45a680f500bff64
e9663e981c6716c243b58ac99549dfbe6dd8371c42d50add46457b5911f63529
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb16f641-0924-4c5c-9f83-6779c59c746a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11381
x-amzn-requestid: 6964d7af-01cd-425b-aeb9-89a336f83a25
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ePKyuGyJoAMF91Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b5f1aa-62558f6852d5861033eecdef;Sampled=0
x-amzn-remapped-date: Wed, 04 Jan 2023 21:37:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: BQpaWc_3xnsf6SPx3UvVIfgBRURZkVYrXyKQi6Khv6_90Ao78BZDeg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 21:55:08 GMT
age: 60196
etag: "11fda31d48a4df3fd6346d92f45a680f500bff64"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F343434d9-f716-41aa-8934-1a5f79402aa1.jpeg
200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F343434d9-f716-41aa-8934-1a5f79402aa1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 008614d302ad57bc6502ad5e07652378
968bc262d2939ec6f0dce9d852682c0aaf86d3d7
5eab9a2591f0f9761ba3b90a5a191b79b6326cccb1ee6b586b00dfc1517c8db6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F343434d9-f716-41aa-8934-1a5f79402aa1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4248
x-amzn-requestid: 17ccfd69-0d12-42ac-b111-059a68735e70
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eCutmF7mIAMFW2w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b0f7f0-5e1653641a0303815656a578;Sampled=0
x-amzn-remapped-date: Sun, 01 Jan 2023 03:03:12 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: zxPQmFj8Y1QxN5CKzoPL9l_tBPeokp60xLh7nhRHTWjcdKreTPy01A==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 05 Jan 2023 07:08:59 GMT
age: 26965
etag: "968bc262d2939ec6f0dce9d852682c0aaf86d3d7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F038e46b4-c5e2-4f46-817c-434795e1e545.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F038e46b4-c5e2-4f46-817c-434795e1e545.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5ce88a04d7f32ce0497bd84db44da8d4
761049019c342553004815ea394dcf282f2cc613
038aa4e5da1428524de833071814998d6c1d8b8b60d4e9c10e60d8a75f7b88fb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F038e46b4-c5e2-4f46-817c-434795e1e545.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5601
x-amzn-requestid: 54813ea9-9435-4355-910b-5b4d1eadf2ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eGlhgHU1oAMFTYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b282d6-17e772ae5b70371367792063;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 07:08:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: hB4FJa_z49ZYA_EY_5CH9CVlU2tYkrhayxyWMmR8lNxR10rjfff-MQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 05 Jan 2023 06:33:38 GMT
age: 29086
etag: "761049019c342553004815ea394dcf282f2cc613"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e832123ea0c92a446b5894e75efc86ae
bb438ca635b43819701067ef07a3d910ad29a0c7
e1b0c6cd873f304de15664f96af6b6914e13fbbfb3e2179ba43369e116446773
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5578
x-amzn-requestid: 93353c3e-1b26-424c-b4c6-0d113703edd6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eFvpBFGvIAMFobw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b22c9f-1d07cff31ae39320693642f0;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 01:00:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: DqWBkBqUffF-tNXmSr2AzrL7hMr0RufOsND4zDF26f8A4c1tetxnWg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 05 Jan 2023 03:41:11 GMT
age: 39433
etag: "bb438ca635b43819701067ef07a3d910ad29a0c7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
use.typekit.net/af/949f99/00000000000000003b9b3068/27/l?primer=55c5493cb0af14ac268acbbc7f827f5e26cbdd5d327df3c7f08f16391f40ef39&fvd=n7&v=3
200 OK 26 kB URL HTTP/2 use.typekit.net/af/949f99/00000000000000003b9b3068/27/l?primer=55c5493cb0af14ac268acbbc7f827f5e26cbdd5d327df3c7f08f16391f40ef39&fvd=n7&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 26328, version 1.0\012- data
Hash 9c27b72e2c1a8e5ac8a7e964ff0aed8a
073f43df068ae4235322e494f40dcafdf0f089dc
134bdb7bd653120932ebc4f7626857990ea29a6c6c6e68600c0689125770ae3b
GET /af/949f99/00000000000000003b9b3068/27/l?primer=55c5493cb0af14ac268acbbc7f827f5e26cbdd5d327df3c7f08f16391f40ef39&fvd=n7&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://app.hellofax.com
Connection: keep-alive
Referer: https://app.hellofax.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 26328
etag: "30f0bb551f460bcbf57df4ff1e17681abb90d664"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Thu, 05 Jan 2023 14:38:24 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/c47696/00000000000000003b9b305e/27/l?primer=55c5493cb0af14ac268acbbc7f827f5e26cbdd5d327df3c7f08f16391f40ef39&fvd=n1&v=3
200 OK 24 kB URL HTTP/2 use.typekit.net/af/c47696/00000000000000003b9b305e/27/l?primer=55c5493cb0af14ac268acbbc7f827f5e26cbdd5d327df3c7f08f16391f40ef39&fvd=n1&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 24472, version 1.0\012- data
Hash d949ed781e2c177e1cb32e357c30eebd
b5bfdaed3e123f63d17a66484931af39b5460da5
f740c310de3ec61ea368ca3a28fa85f7a34c67918c2100586b7fbd4d3ade6dac
GET /af/c47696/00000000000000003b9b305e/27/l?primer=55c5493cb0af14ac268acbbc7f827f5e26cbdd5d327df3c7f08f16391f40ef39&fvd=n1&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://app.hellofax.com
Connection: keep-alive
Referer: https://app.hellofax.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 24472
etag: "a46cfc1c675d2be3af3b6db69b8dee88a900d995"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Thu, 05 Jan 2023 14:38:24 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/576d53/00000000000000003b9b3066/27/l?primer=55c5493cb0af14ac268acbbc7f827f5e26cbdd5d327df3c7f08f16391f40ef39&fvd=n6&v=3
200 OK 26 kB URL HTTP/2 use.typekit.net/af/576d53/00000000000000003b9b3066/27/l?primer=55c5493cb0af14ac268acbbc7f827f5e26cbdd5d327df3c7f08f16391f40ef39&fvd=n6&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 25664, version 1.0\012- data
Hash fbf3d18d970ca7aaa5d39a5ceddfe942
9a99c35c8e42fd319bb8407166a335dfa84f7060
9423b7815560c901e00bf66bbfd8cf5f8eaa19432cfa785d14d59411f355773e
GET /af/576d53/00000000000000003b9b3066/27/l?primer=55c5493cb0af14ac268acbbc7f827f5e26cbdd5d327df3c7f08f16391f40ef39&fvd=n6&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://app.hellofax.com
Connection: keep-alive
Referer: https://app.hellofax.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 25664
etag: "62407c1c36725f680d1e8267d0ae4b4e221c777a"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Thu, 05 Jan 2023 14:38:24 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/705e94/00000000000000003b9b3062/27/l?primer=55c5493cb0af14ac268acbbc7f827f5e26cbdd5d327df3c7f08f16391f40ef39&fvd=n4&v=3
200 OK 26 kB URL HTTP/2 use.typekit.net/af/705e94/00000000000000003b9b3062/27/l?primer=55c5493cb0af14ac268acbbc7f827f5e26cbdd5d327df3c7f08f16391f40ef39&fvd=n4&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 25684, version 1.0\012- data
Hash 18ca1faebf89c080ad9e8ff1db76d38a
56d2a9c9925d2eac815fb166a1e24b2d02a5aa9e
275c04fcee6a5623893447491c75267d4f63f2527b33dd424cb6a8ab385f5553
GET /af/705e94/00000000000000003b9b3062/27/l?primer=55c5493cb0af14ac268acbbc7f827f5e26cbdd5d327df3c7f08f16391f40ef39&fvd=n4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://app.hellofax.com
Connection: keep-alive
Referer: https://app.hellofax.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 25684
etag: "5021862b51a169c3261e4030d599c121cc829e1d"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Thu, 05 Jan 2023 14:38:24 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/40ff7f/00000000000000003b9b3061/27/l?primer=55c5493cb0af14ac268acbbc7f827f5e26cbdd5d327df3c7f08f16391f40ef39&fvd=i3&v=3
200 OK 28 kB URL HTTP/2 use.typekit.net/af/40ff7f/00000000000000003b9b3061/27/l?primer=55c5493cb0af14ac268acbbc7f827f5e26cbdd5d327df3c7f08f16391f40ef39&fvd=i3&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 27776, version 1.0\012- data
Hash aea660f172feef3a90636e68f806fb92
a367739d0af63d88ee6cc9b3becedcbfefb050a5
dc555cb090f23799ce2fd349d283c77e1f05e233bdfdba2561a59d451d9e0259
GET /af/40ff7f/00000000000000003b9b3061/27/l?primer=55c5493cb0af14ac268acbbc7f827f5e26cbdd5d327df3c7f08f16391f40ef39&fvd=i3&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://app.hellofax.com
Connection: keep-alive
Referer: https://app.hellofax.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 27776
etag: "d773d39c756f21aef87f54f8e42b63736fa57869"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Thu, 05 Jan 2023 14:38:24 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/1da05b/0000000000000000000132df/27/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n4&v=3
200 OK 22 kB URL HTTP/2 use.typekit.net/af/1da05b/0000000000000000000132df/27/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n4&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 22380, version 1.0\012- data
Hash 40eb73113f3c6b33594933da11cef731
371e052976ba766ce57017585b062a481da3c29c
0f306997a671d3d6e526c1e3f25799df50c350ee04fe992486739a31ff1b625c
GET /af/1da05b/0000000000000000000132df/27/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://app.hellofax.com
Connection: keep-alive
Referer: https://app.hellofax.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 22380
etag: "c25c70b567f72b3d06569f5440be59680fc95614"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Thu, 05 Jan 2023 14:38:24 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/32d3ee/0000000000000000000132e0/27/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=i4&v=3
200 OK 22 kB URL HTTP/2 use.typekit.net/af/32d3ee/0000000000000000000132e0/27/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=i4&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 22424, version 1.0\012- data
Hash 12ed3a22203ca443677dafbb679900e0
98a65a9bedcb7d727bee3a9bf831c250d2a1d3a3
7c4077af61fa4f923f758471be28d79ab1b9da617ec834114386d00362b4f090
GET /af/32d3ee/0000000000000000000132e0/27/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=i4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://app.hellofax.com
Connection: keep-alive
Referer: https://app.hellofax.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 22424
etag: "e30c80b23ab4ecfc5ffe85d134e1e59fde3e4d89"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Thu, 05 Jan 2023 14:38:24 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/8f4e31/0000000000000000000132e3/27/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n7&v=3
200 OK 23 kB URL HTTP/2 use.typekit.net/af/8f4e31/0000000000000000000132e3/27/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n7&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 23156, version 1.0\012- data
Hash 3ca6f93bc5c2cabe9221f4cc76f4fc50
6d4928fb8e53c0839e3c12a3c496edf5e341dbfd
5507b886b42fdb53545e45ff9b75efa26637ce8472f959d2b27ef6ca8d4154b7
GET /af/8f4e31/0000000000000000000132e3/27/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n7&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://app.hellofax.com
Connection: keep-alive
Referer: https://app.hellofax.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 23156
etag: "e5f99bb36a4995d810474f297764516cbf95b5a5"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Thu, 05 Jan 2023 14:38:24 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/383ab4/0000000000000000000132e4/27/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=i7&v=3
200 OK 22 kB URL HTTP/2 use.typekit.net/af/383ab4/0000000000000000000132e4/27/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=i7&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 22400, version 1.0\012- data
Hash b9acee1ab7ebac79c849da0a59b81a49
cb55f75cca97000c7183611124ed948c2e303eb4
0fde3f9ceee3b3875e03bbae8369351b3542cab1c0973f20232af21f92fccc56
GET /af/383ab4/0000000000000000000132e4/27/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=i7&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://app.hellofax.com
Connection: keep-alive
Referer: https://app.hellofax.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 22400
etag: "a940a84f32331694746f049761ac493728f23f04"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Thu, 05 Jan 2023 14:38:24 GMT
X-Firefox-Spdy: h2
p.typekit.net/p.gif?s=1&k=awb1ysu&ht=tk&h=app.hellofax.com&f=139.171.173.175.5474.5475.10294.10295.10296.10297&a=971683&js=1.21.0&app=typekit&e=js&_=1672929494544
200 OK 35 B URL HTTP/2 p.typekit.net/p.gif?s=1&k=awb1ysu&ht=tk&h=app.hellofax.com&f=139.171.173.175.5474.5475.10294.10295.10296.10297&a=971683&js=1.21.0&app=typekit&e=js&_=1672929494544
IP
ASN #20940 Akamai International B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 81144d75b3e69e9aa2fa3e9d83a64d03
f0fbc60b50edf5b2a0b76e0aa0537b76bf346ffc
9b9265c69a5cc295d1ab0d04e0273b3677db1a6216ce2ccf4efc8c277ed84b39
GET /p.gif?s=1&k=awb1ysu&ht=tk&h=app.hellofax.com&f=139.171.173.175.5474.5475.10294.10295.10296.10297&a=971683&js=1.21.0&app=typekit&e=js&_=1672929494544 HTTP/1.1
Host: p.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.hellofax.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=604800
content-type: image/gif
cross-origin-resource-policy: cross-origin
etag: "61c32ad2-23"
last-modified: Wed, 22 Dec 2021 13:40:34 GMT
server: nginx
content-length: 35
unused62: 8096267
date: Thu, 05 Jan 2023 14:38:24 GMT
X-Firefox-Spdy: h2
sentry.io/api/5173472/envelope/?sentry_key=6e9fe57ccbc44ee289523c7c1a3272d4&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.13.0
200 OK 2 B URL HTTP/1.1 sentry.io/api/5173472/envelope/?sentry_key=6e9fe57ccbc44ee289523c7c1a3272d4&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.13.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /api/5173472/envelope/?sentry_key=6e9fe57ccbc44ee289523c7c1a3272d4&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.13.0 HTTP/1.1
Host: sentry.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app.hellofax.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://app.hellofax.com
Content-Length: 438
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 05 Jan 2023 14:38:24 GMT
Content-Type: application/json
Content-Length: 2
Connection: keep-alive
access-control-allow-origin: https://app.hellofax.com
access-control-expose-headers: retry-after, x-sentry-rate-limits, x-sentry-error
vary: Origin
x-envoy-upstream-service-time: 0
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
consent.dropbox.com/?hide_gdpr=false&is_ccpa_enabled=true&gpc_signal=undefined&origin=https%253A%252F%252Fapp.hellofax.com&sandbox_redirect=false&locale=en
200 OK 854 B URL HTTP/2 consent.dropbox.com/?hide_gdpr=false&is_ccpa_enabled=true&gpc_signal=undefined&origin=https%253A%252F%252Fapp.hellofax.com&sandbox_redirect=false&locale=en
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash dc63fb23d6563676b3090bae3f02ccde
dd6c4202705f760dd5744caee7ccb31f703fc880
c8bce4b4bc1b212ffc445ae939680990a6f4b23eed318c8b9a7f1e21facd1ab1
GET /?hide_gdpr=false&is_ccpa_enabled=true&gpc_signal=undefined&origin=https%253A%252F%252Fapp.hellofax.com&sandbox_redirect=false&locale=en HTTP/1.1
Host: consent.dropbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app.hellofax.com/
Connection: keep-alive
Cookie: t=OWC6eiSugIE2gyJOY_ylsmNr; locale=en
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 854
last-modified: Tue, 06 Sep 2022 19:00:36 GMT
x-amz-version-id: jF1fSWiqtJx.5E0VeuXfyr4mbqFqvdbZ
server: AmazonS3
date: Thu, 05 Jan 2023 14:38:24 GMT
etag: "dc63fb23d6563676b3090bae3f02ccde"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: h-hDlElIQP9O_cWGFo_E8m-tqFwHvCpaFMOGfAqDuLNFn_P0AxWxnA==
age: 403
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0bd23f8fc47c9185bff303bd3c6bc13c
dee60c9c9aecea476af72e0ba106c016468c2d49
a93588c80ee39e59809ef7c9a1282e369bfa5e1541fb7fbbf563ca7bbf3bc40d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=118616
Date: Thu, 05 Jan 2023 14:38:24 GMT
Etag: "63b5f9ed-1d7"
Expires: Fri, 06 Jan 2023 23:35:20 GMT
Last-Modified: Wed, 04 Jan 2023 22:13:01 GMT
Server: ECS (bsa/EB19)
X-Cache: Miss from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ibn-FwXMguVx4AwE9Vl0n0Af5Ns6Jq1mSuXaSlYRjX7Tl9Q_97dHEA==
Age: 4939
app.hellofax.com/csp_report
204 No Content 0 B URL HTTP/1.1 app.hellofax.com/csp_report
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /csp_report HTTP/1.1
Host: app.hellofax.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 1102
Origin: https://app.hellofax.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 204 No Content
Date: Thu, 05 Jan 2023 14:38:24 GMT
Connection: keep-alive
Set-Cookie: AWSALB=ZcF5MdhKn+u1Km49tTizRJu4loeX8m2Pwu2zSXHw/RgsElU4FoLSnkY8WFBA2gQucFmq9Th66PVLGMlZqssWx64cmPl/uOFU5sqdM6xAHhC1TkwaxlJYZmQI1OHv; Expires=Thu, 12 Jan 2023 14:38:24 GMT; Path=/
AWSALBCORS=ZcF5MdhKn+u1Km49tTizRJu4loeX8m2Pwu2zSXHw/RgsElU4FoLSnkY8WFBA2gQucFmq9Th66PVLGMlZqssWx64cmPl/uOFU5sqdM6xAHhC1TkwaxlJYZmQI1OHv; Expires=Thu, 12 Jan 2023 14:38:24 GMT; Path=/; SameSite=None; Secure
hf_user=a0719f2a2e5b96759c2d27d5371696626677d77e878f1e4535afb24e672f835d:52fe8309b1594b696572e8e8c05fc925fde9bdf3; path=/; domain=app.hellofax.com; secure; httponly
hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvZmF4LmNvbS9jc3BfcmVwb3J0; expires=Sat, 04-Feb-2023 14:38:24 GMT; Max-Age=2592000; path=/; domain=hellofax.com
hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvZmF4LmNvbS9jc3BfcmVwb3J0; expires=Sat, 04-Feb-2023 14:38:24 GMT; Max-Age=2592000; path=/; domain=hellofax.com
hs_puuid=01703713514433ed3b7f271ce8699c01a3ced8d2; expires=Sun, 02-Jan-2033 14:38:24 GMT; Max-Age=315360000; path=/; domain=hellofax.com
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: private
X-Content-Type-Options: nosniff
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: SAMEORIGIN
P3P: CP="NOP3PPOLICY"
app.hellofax.com/csp_report
204 No Content 0 B URL HTTP/1.1 app.hellofax.com/csp_report
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /csp_report HTTP/1.1
Host: app.hellofax.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 1102
Origin: https://app.hellofax.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 204 No Content
Date: Thu, 05 Jan 2023 14:38:24 GMT
Connection: keep-alive
Set-Cookie: AWSALB=icgy4toC6nbxwIH17bE1RqrFDtRuXfqZAr97uqhVK2+fUi57CM6OoaMkzAVrYQJ3GNwyx5hazEBeqYVN9E5b7Yn7D1EEoWf3Y6vqsTICV/CWm/Df9/kcInOTOFbW; Expires=Thu, 12 Jan 2023 14:38:24 GMT; Path=/
AWSALBCORS=icgy4toC6nbxwIH17bE1RqrFDtRuXfqZAr97uqhVK2+fUi57CM6OoaMkzAVrYQJ3GNwyx5hazEBeqYVN9E5b7Yn7D1EEoWf3Y6vqsTICV/CWm/Df9/kcInOTOFbW; Expires=Thu, 12 Jan 2023 14:38:24 GMT; Path=/; SameSite=None; Secure
hf_user=0842b6f04aa89b9245842d0f894ba14bbcce0a3f9356db3c83477308a94931de:38d0d4d49e243e9d96f821d3a4c84a67d48d5f3a; path=/; domain=app.hellofax.com; secure; httponly
hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvZmF4LmNvbS9jc3BfcmVwb3J0; expires=Sat, 04-Feb-2023 14:38:24 GMT; Max-Age=2592000; path=/; domain=hellofax.com
hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvZmF4LmNvbS9jc3BfcmVwb3J0; expires=Sat, 04-Feb-2023 14:38:24 GMT; Max-Age=2592000; path=/; domain=hellofax.com
hs_puuid=195e2670910647c19c71f343d76402a71e28d35b; expires=Sun, 02-Jan-2033 14:38:24 GMT; Max-Age=315360000; path=/; domain=hellofax.com
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: private
X-Content-Type-Options: nosniff
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: SAMEORIGIN
P3P: CP="NOP3PPOLICY"
app.hellofax.com/csp_report
204 No Content 0 B URL HTTP/1.1 app.hellofax.com/csp_report
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /csp_report HTTP/1.1
Host: app.hellofax.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 1102
Origin: https://app.hellofax.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 204 No Content
Date: Thu, 05 Jan 2023 14:38:24 GMT
Connection: keep-alive
Set-Cookie: AWSALB=YVrjxe8v+H342fJdlzn+lISoeMIZYhe3ULm07dooJ0OiMuHPO25InwtIX4TtLQ7gVGRxEJIEmqG26YXo4CIPEBns4SAgG1ATEkpXEwZPNbIZ5rZWUWJwiQAMpbRp; Expires=Thu, 12 Jan 2023 14:38:24 GMT; Path=/
AWSALBCORS=YVrjxe8v+H342fJdlzn+lISoeMIZYhe3ULm07dooJ0OiMuHPO25InwtIX4TtLQ7gVGRxEJIEmqG26YXo4CIPEBns4SAgG1ATEkpXEwZPNbIZ5rZWUWJwiQAMpbRp; Expires=Thu, 12 Jan 2023 14:38:24 GMT; Path=/; SameSite=None; Secure
hf_user=53f79abd8cce0f072e3a095bbddb7b9c7e19d138b1a80c90a6630c8fa5c94146:5bcd564343a48f32784d6b880963cc9f1a68e75b; path=/; domain=app.hellofax.com; secure; httponly
hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvZmF4LmNvbS9jc3BfcmVwb3J0; expires=Sat, 04-Feb-2023 14:38:24 GMT; Max-Age=2592000; path=/; domain=hellofax.com
hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvZmF4LmNvbS9jc3BfcmVwb3J0; expires=Sat, 04-Feb-2023 14:38:24 GMT; Max-Age=2592000; path=/; domain=hellofax.com
hs_puuid=8e02e473c0bdeb7423594f5f3cd3a301048bb2ce; expires=Sun, 02-Jan-2033 14:38:24 GMT; Max-Age=315360000; path=/; domain=hellofax.com
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: private
X-Content-Type-Options: nosniff
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: SAMEORIGIN
P3P: CP="NOP3PPOLICY"
app.hellofax.com/csp_report
204 No Content 0 B URL HTTP/1.1 app.hellofax.com/csp_report
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /csp_report HTTP/1.1
Host: app.hellofax.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 1102
Origin: https://app.hellofax.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 204 No Content
Date: Thu, 05 Jan 2023 14:38:24 GMT
Connection: keep-alive
Set-Cookie: AWSALB=6/C2sIsvD7rXFDUujgnyXMduY+5FFy8amMi29NJqJzwmdyRmTFJlAuSTbd3w72CRSgbOfYB5z30FjbmbQJA+GkGOUQqyDTzgDvMK89dwGda3TgMoCwOuUz4BVzSI; Expires=Thu, 12 Jan 2023 14:38:24 GMT; Path=/
AWSALBCORS=6/C2sIsvD7rXFDUujgnyXMduY+5FFy8amMi29NJqJzwmdyRmTFJlAuSTbd3w72CRSgbOfYB5z30FjbmbQJA+GkGOUQqyDTzgDvMK89dwGda3TgMoCwOuUz4BVzSI; Expires=Thu, 12 Jan 2023 14:38:24 GMT; Path=/; SameSite=None; Secure
hf_user=e77d08d10f3f6df45f2053690d6772b05536ba252b2c6a326aba040d6b70aecf:e87f8a118b6d3547653cf068bf1556e15d39c085; path=/; domain=app.hellofax.com; secure; httponly
hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvZmF4LmNvbS9jc3BfcmVwb3J0; expires=Sat, 04-Feb-2023 14:38:24 GMT; Max-Age=2592000; path=/; domain=hellofax.com
hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvZmF4LmNvbS9jc3BfcmVwb3J0; expires=Sat, 04-Feb-2023 14:38:24 GMT; Max-Age=2592000; path=/; domain=hellofax.com
hs_puuid=8eed47fd46a700db4f25978d5f3e33ec05b0d4aa; expires=Sun, 02-Jan-2033 14:38:24 GMT; Max-Age=315360000; path=/; domain=hellofax.com
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: private
X-Content-Type-Options: nosniff
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: SAMEORIGIN
P3P: CP="NOP3PPOLICY"
app.hellofax.com/csp_report
204 No Content 0 B URL HTTP/1.1 app.hellofax.com/csp_report
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /csp_report HTTP/1.1
Host: app.hellofax.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 1102
Origin: https://app.hellofax.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 204 No Content
Date: Thu, 05 Jan 2023 14:38:24 GMT
Connection: keep-alive
Set-Cookie: AWSALB=mwxdzVEF7HWkKsJs2PD86dvej4eq3hLPJO/KGaAM9VJ/i7zR/B7QapgpG3TSWfP3s+mxE9umIVv+KCHeYNuVWSo+hBbGW4kB/5LV+RB5fTUBpPzxiUjGkhgjvq8Y; Expires=Thu, 12 Jan 2023 14:38:24 GMT; Path=/
AWSALBCORS=mwxdzVEF7HWkKsJs2PD86dvej4eq3hLPJO/KGaAM9VJ/i7zR/B7QapgpG3TSWfP3s+mxE9umIVv+KCHeYNuVWSo+hBbGW4kB/5LV+RB5fTUBpPzxiUjGkhgjvq8Y; Expires=Thu, 12 Jan 2023 14:38:24 GMT; Path=/; SameSite=None; Secure
hf_user=37f3452540325527e1eaad52a9bbfdcdb24df6b8cf8ecf18dedf89eff114cdab:f87a81486f234936d63cecdb49a478c2c49c8a98; path=/; domain=app.hellofax.com; secure; httponly
hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvZmF4LmNvbS9jc3BfcmVwb3J0; expires=Sat, 04-Feb-2023 14:38:24 GMT; Max-Age=2592000; path=/; domain=hellofax.com
hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvZmF4LmNvbS9jc3BfcmVwb3J0; expires=Sat, 04-Feb-2023 14:38:24 GMT; Max-Age=2592000; path=/; domain=hellofax.com
hs_puuid=7235c60bc73a267c82525650fbe1e510192848e2; expires=Sun, 02-Jan-2033 14:38:24 GMT; Max-Age=315360000; path=/; domain=hellofax.com
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: private
X-Content-Type-Options: nosniff
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: SAMEORIGIN
P3P: CP="NOP3PPOLICY"
app.hellofax.com/csp_report
204 No Content 0 B URL HTTP/1.1 app.hellofax.com/csp_report
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /csp_report HTTP/1.1
Host: app.hellofax.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 1102
Origin: https://app.hellofax.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 204 No Content
Date: Thu, 05 Jan 2023 14:38:25 GMT
Connection: keep-alive
Set-Cookie: AWSALB=xsAeTUi2+8q5amFt2eVr5yO8ShVY0TqsN2m78B/9wdzVFUeD8DCPTUqf5OJvU4OKFjd5Rxhs0kfZthH36erd8SRTE0gujk8Ey/NPoWJZfQbHc+02e9CnDMKB64+7; Expires=Thu, 12 Jan 2023 14:38:24 GMT; Path=/
AWSALBCORS=xsAeTUi2+8q5amFt2eVr5yO8ShVY0TqsN2m78B/9wdzVFUeD8DCPTUqf5OJvU4OKFjd5Rxhs0kfZthH36erd8SRTE0gujk8Ey/NPoWJZfQbHc+02e9CnDMKB64+7; Expires=Thu, 12 Jan 2023 14:38:24 GMT; Path=/; SameSite=None; Secure
hf_user=ab320e54fecb4cb158b5523e2d6772603943819db0d82f00306cbc4015a7c68f:382f14d34d4884d2d034074773d937f5f43a7a8f; path=/; domain=app.hellofax.com; secure; httponly
hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvZmF4LmNvbS9jc3BfcmVwb3J0; expires=Sat, 04-Feb-2023 14:38:24 GMT; Max-Age=2592000; path=/; domain=hellofax.com
hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvZmF4LmNvbS9jc3BfcmVwb3J0; expires=Sat, 04-Feb-2023 14:38:24 GMT; Max-Age=2592000; path=/; domain=hellofax.com
hs_puuid=d78e7ec0906e1d0832e037c4e285aef241758c23; expires=Sun, 02-Jan-2033 14:38:24 GMT; Max-Age=315360000; path=/; domain=hellofax.com
Server: Apache
Strict-Transport-Security: max-age=31536000
Cache-Control: private
X-Content-Type-Options: nosniff
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: SAMEORIGIN
P3P: CP="NOP3PPOLICY"
cdn.hellosign.com/1.140.0/images/dropbox-fax-favicon.ico
200 OK 210 kB URL HTTP/2 cdn.hellosign.com/1.140.0/images/dropbox-fax-favicon.ico
IP
File type MS Windows icon resource - 1 icon, -31x-31, 32 bits/pixel\012- data
Size 210 kB (209762 bytes)
Hash 86b787522f594aee42ebc41ce852792a
c7576020f6907c9032118abbc8475e47551c2eed
807e8ada03de26756d6dc6a6ffa757caea7820c028b49b63596880b5a68c9597
GET /1.140.0/images/dropbox-fax-favicon.ico HTTP/1.1
Host: cdn.hellosign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.hellofax.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
content-length: 209762
last-modified: Thu, 15 Dec 2022 22:16:26 GMT
x-amz-version-id: cEDfrBrRPCAGzlGYAD8SsFeLBL0PEjoH
accept-ranges: bytes
server: AmazonS3
date: Wed, 04 Jan 2023 16:28:18 GMT
etag: "86b787522f594aee42ebc41ce852792a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: EQFy-MEPn_KC6CnfzI_PwKPvdqujQ2aMZox_eNG_EMJJTY17tGG4FA==
age: 79808
X-Firefox-Spdy: h2
client-api.arkoselabs.com/fc/api/sri/
200 OK 37 kB URL HTTP/2 client-api.arkoselabs.com/fc/api/sri/
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7cb9933eb8a96999bc763f87b6063438
137030178d0166d6f449a85abb79bc706ab9065a
f05b1a2660107d6376c8aa762cc45a2b615ebc44627e704416c1d28081156218
GET /fc/api/sri/ HTTP/1.1
Host: client-api.arkoselabs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://client-api.arkoselabs.com/v2/07071A28-2099-0596-6DA4-8CCD9C580290/enforcement.441f150ee6a4514242b1ad2a4aef188a.html
Connection: keep-alive
Cookie: __cf_bm=PN5f8vYLmBRIE1W3VxFjVIyMA.Q96ONcq1hRsAzjaM8-1672929504-0-AWClWA+nEppdyskQBY8e3/+xemmi+PnkUGk/U2z8SV1tFjn8wvcc7Ohc/dRGRBOdCOgsHTic7B/dVCMnOBn55F0=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 05 Jan 2023 14:38:25 GMT
content-type: text/plain;charset=UTF-8
access-control-allow-origin: *
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 784cf51e3e21b523-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.hellofax.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 05 Jan 2023 13:34:02 GMT
expires: Thu, 05 Jan 2023 15:34:02 GMT
cache-control: public, max-age=7200
age: 3863
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.hellosign.com/1.140.0/images/icons/hf/apple-touch-icon.png
200 OK 3.7 kB URL HTTP/2 cdn.hellosign.com/1.140.0/images/icons/hf/apple-touch-icon.png
IP
File type PNG image data, 512 x 512, 8-bit colormap, non-interlaced\012- data
Hash ca8b6d17ae09de7aa2014cb5f5348f22
515cac550a5a1f40977f1e035492cd003a0d24e1
51c2f8749f2cc418204b8826fa32bc8ea40011b740a5a5cae1f6a15fd6d7ca43
GET /1.140.0/images/icons/hf/apple-touch-icon.png HTTP/1.1
Host: cdn.hellosign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.hellofax.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 3667
last-modified: Thu, 15 Dec 2022 22:16:28 GMT
x-amz-version-id: Yo0FYdl4GU4.ib_V9g665xHTy.9hY32f
accept-ranges: bytes
server: AmazonS3
date: Thu, 05 Jan 2023 14:38:25 GMT
etag: "ca8b6d17ae09de7aa2014cb5f5348f22"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4kZjlH-jHQRPftsoXxwW4DI2M9c4OEB7wGGve0WmSYk3N7LPjf1_sQ==
age: 3726
X-Firefox-Spdy: h2
client-api.arkoselabs.com/v2/07071A28-2099-0596-6DA4-8CCD9C580290/enforcement.441f150ee6a4514242b1ad2a4aef188a.html
200 OK 874 B URL HTTP/2 client-api.arkoselabs.com/v2/07071A28-2099-0596-6DA4-8CCD9C580290/enforcement.441f150ee6a4514242b1ad2a4aef188a.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (377)
Hash a59c1003cfd98ca1f3f68e16b6c1f627
5c9de69b187e2092ca802946b901148067fdb573
86b4ff17011511032931e55d2858eb88eeeefaa8298b83f767becd93e4d53817
GET /v2/07071A28-2099-0596-6DA4-8CCD9C580290/enforcement.441f150ee6a4514242b1ad2a4aef188a.html HTTP/1.1
Host: client-api.arkoselabs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.hellofax.com/
Cookie: __cf_bm=PN5f8vYLmBRIE1W3VxFjVIyMA.Q96ONcq1hRsAzjaM8-1672929504-0-AWClWA+nEppdyskQBY8e3/+xemmi+PnkUGk/U2z8SV1tFjn8wvcc7Ohc/dRGRBOdCOgsHTic7B/dVCMnOBn55F0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 05 Jan 2023 14:38:24 GMT
content-type: text/html; charset=utf-8
cf-ray: 784cf51d1ca0b523-OSL
access-control-allow-origin: *
age: 3245706
cache-control: public, max-age=31536000, immutable
last-modified: Tue, 29 Nov 2022 00:34:44 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
cf-cache-status: HIT
cache-tag: 07071A28-2099-0596-6DA4-8CCD9C580290
capi-worker-type: dedicated
content-security-policy: default-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; connect-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; font-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; frame-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; img-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn data:; script-src 'self' 'unsafe-inline' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; style-src 'self' 'unsafe-inline' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn;
permissions-policy: accelerometer=*, autoplay=*, camera=*, display-capture=*, document-domain=*, encrypted-media=*, fullscreen=*, geolocation=*, gyroscope=*, midi=*, payment=*, picture-in-picture=*, sync-xhr=*, usb=*
x-amz-id-2: gjhT0eeG2ciDppiGe+bVnLW9VFEe6lBO8Up6SChnl+i3LrxlrZngxCQcThr51amX1yYk364f0ns=
x-amz-request-id: 04AG9SFKVN707AAX
x-amz-version-id: 8Gc7OVRnryDyCUjhvDFutijms8l1Vl5r
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 75cfc8b3d7a22c317465a354b950897b
272651a02a8fa17067d9e4e9ff4878d2c1af75af
40dc9698f6d97aeada27973d1b096a149bb5bb299c38a6ed87e853e6d724d26b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 14:38:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
client-api.arkoselabs.com/v2/07071A28-2099-0596-6DA4-8CCD9C580290/enforcement.441f150ee6a4514242b1ad2a4aef188a.js
200 OK 93 kB URL HTTP/2 client-api.arkoselabs.com/v2/07071A28-2099-0596-6DA4-8CCD9C580290/enforcement.441f150ee6a4514242b1ad2a4aef188a.js
IP
File type Unicode text, UTF-8 text, with very long lines (34091), with NEL line terminators
Hash 41f4d9e2a6637a9285db30250af1843f
09febd6aa3708cd4a502045add9ec293c5aab588
6712930f31cd0ab98b22c99bf9bb039949368d0a71e2bc5e31f343f931699a7e
GET /v2/07071A28-2099-0596-6DA4-8CCD9C580290/enforcement.441f150ee6a4514242b1ad2a4aef188a.js HTTP/1.1
Host: client-api.arkoselabs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://client-api.arkoselabs.com/v2/07071A28-2099-0596-6DA4-8CCD9C580290/enforcement.441f150ee6a4514242b1ad2a4aef188a.html
Connection: keep-alive
Cookie: __cf_bm=PN5f8vYLmBRIE1W3VxFjVIyMA.Q96ONcq1hRsAzjaM8-1672929504-0-AWClWA+nEppdyskQBY8e3/+xemmi+PnkUGk/U2z8SV1tFjn8wvcc7Ohc/dRGRBOdCOgsHTic7B/dVCMnOBn55F0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 05 Jan 2023 14:38:24 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 784cf51d7cfcb523-OSL
access-control-allow-origin: *
age: 340832
cache-control: public, max-age=31536000, immutable
etag: W/"ed47c094a45b36608726e9df8a77612e"
last-modified: Tue, 29 Nov 2022 00:34:45 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
cf-cache-status: HIT
cache-tag: 07071A28-2099-0596-6DA4-8CCD9C580290
capi-worker-type: dedicated
content-security-policy: default-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; connect-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; font-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; frame-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; img-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn data:; script-src 'self' 'unsafe-inline' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; style-src 'self' 'unsafe-inline' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn;
permissions-policy: accelerometer=*, autoplay=*, camera=*, display-capture=*, document-domain=*, encrypted-media=*, fullscreen=*, geolocation=*, gyroscope=*, midi=*, payment=*, picture-in-picture=*, sync-xhr=*, usb=*
x-amz-id-2: VVc712054OpibfGtl5oJay1iEXdmdegbGER3JpjrMuGDIpO48EDVC5OemsPPnbKVLjCbmPvipYE=
x-amz-request-id: M67V2NTP9C8Y97BM
x-amz-version-id: a62UTLw7thyU9kOLm3Zq8_e_RPJ_vNUn
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5dcd3e3f6440384500af24c809a3f175
3a5df7e2369c9d65865d73410b0cac87e1b5a54c
b7c5a41dbd443dcb04231372b9ac63a3853d57e43941af5b22073693291099df
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 14:38:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
marketing.hellofax.com/editor/view/super_group_guid/b97ebb00e0f5ed635f7b5e517a8345e08a3e22db
200 OK 16 kB URL HTTP/2 marketing.hellofax.com/editor/view/super_group_guid/b97ebb00e0f5ed635f7b5e517a8345e08a3e22db
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 687b85053e9d0328ccf782708ea72a95
4adadf3a66c11bd6eb28320da9adae93a79d6450
6f1bef01025323121d82f279fbe92e1599ef4a5a31044c496564b3e18c1afa8c
GET /editor/view/super_group_guid/b97ebb00e0f5ed635f7b5e517a8345e08a3e22db HTTP/1.1
Host: marketing.hellofax.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app.hellofax.com/
Connection: keep-alive
Cookie: hs_consent_banner_enabled=true; hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvZmF4LmNvbS9lZGl0b3Ivdmlldy9zdXBlcl9ncm91cF9ndWlkL2I5N2ViYjAwZTBmNWVkNjM1ZjdiNWU1MTdhODM0NWUwOGEzZTIyZGI/dXRtX2NhbXBhaWduPWZheF9jb25maXJtYXRpb24mdXRtX3NvdXJjZT1kZWZhdWx0JnV0bV9jaGFubmVsPXByb2R1Y3RfcHJvbW8mdXRtX21lZGl1bT1lbWFpbCZ1dG1fY29udGVudD1vcmlnaW5hbA==; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvZmF4LmNvbS9lZGl0b3Ivdmlldy9zdXBlcl9ncm91cF9ndWlkL2I5N2ViYjAwZTBmNWVkNjM1ZjdiNWU1MTdhODM0NWUwOGEzZTIyZGI/dXRtX2NhbXBhaWduPWZheF9jb25maXJtYXRpb24mdXRtX3NvdXJjZT1kZWZhdWx0JnV0bV9jaGFubmVsPXByb2R1Y3RfcHJvbW8mdXRtX21lZGl1bT1lbWFpbCZ1dG1fY29udGVudD1vcmlnaW5hbA==; hs_puuid=d143aec0d62f43d784fd81a4e8277a790f9d9733; deferred_login_redirect_url=https://app.hellofax.com/editor/view/super_group_guid/b97ebb00e0f5ed635f7b5e517a8345e08a3e22db?utm_campaign=fax_confirmation&utm_source=default&utm_channel=product_promo&utm_medium=email&utm_content=original
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/html
content-length: 15494
date: Thu, 05 Jan 2023 14:38:26 GMT
last-modified: Thu, 01 Dec 2022 16:20:01 GMT
etag: "687b85053e9d0328ccf782708ea72a95"
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Qk0um_jgMHj1S7K05e-6GsjdkX9Zyts420PAoOSl7a3caScdxYfcmw==
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
c.evidon.com/sitenotice/evidon-sitenotice-tag.js
200 OK 20 kB URL HTTP/2 c.evidon.com/sitenotice/evidon-sitenotice-tag.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 3b00a7ecdaf4bff1751456e89ce005f4
2645658a488474676e934af157bf2164f8edeb6b
b8fb30b4d1bdb4738bf563d499929ccdadda6a489d88faf959f40166268ed300
GET /sitenotice/evidon-sitenotice-tag.js HTTP/1.1
Host: c.evidon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://consent.dropbox.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "b9539a2e77d15a946ad29fbada55c14c:1671558610.191575"
last-modified: Tue, 20 Dec 2022 17:50:10 GMT
server: AkamaiNetStorage
content-encoding: gzip
expires: Sat, 07 Jan 2023 14:38:25 GMT
date: Thu, 05 Jan 2023 14:38:25 GMT
content-length: 19598
vary: Accept-Encoding, Origin
cache-control: max-age=172800, private;max-age=86400
access-control-max-age: 108000
access-control-allow-origin:
access-control-allow-headers: *
access-control-allow-methods: GET,OPTIONS,POST
X-Firefox-Spdy: h2
c.evidon.com/sitenotice/3401/translations/en.js
200 OK 6.4 kB URL HTTP/2 c.evidon.com/sitenotice/3401/translations/en.js
IP
File type ASCII text, with very long lines (41349), with no line terminators
Hash 7cdb0408336768c3c8697de7fe062fed
455d1237f3256aba83c5102b10212f8bc767bf22
f5c051f3693f6e0a92a0576bbdc74de8c243ec02c5232e49c919999fe1c79ece
GET /sitenotice/3401/translations/en.js HTTP/1.1
Host: c.evidon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://consent.dropbox.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "92ddb3e3355b422d8513e225548bbf64:1664899591.798772"
last-modified: Tue, 04 Oct 2022 16:06:31 GMT
server: AkamaiNetStorage
content-encoding: gzip
expires: Sat, 07 Jan 2023 14:38:25 GMT
date: Thu, 05 Jan 2023 14:38:25 GMT
content-length: 6406
vary: Accept-Encoding, Origin
cache-control: max-age=172800, private;max-age=86400
access-control-max-age: 108000
access-control-allow-origin:
access-control-allow-headers: *
access-control-allow-methods: GET,OPTIONS,POST
X-Firefox-Spdy: h2
c.evidon.com/sitenotice/3401/dropbox/settings.js
301 Moved Permanently 0 B URL HTTP/2 c.evidon.com/sitenotice/3401/dropbox/settings.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sitenotice/3401/dropbox/settings.js HTTP/1.1
Host: c.evidon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://consent.dropbox.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: AkamaiGHost
content-length: 0
location: https://c.evidon.com/sitenotice/3401/dropbox/settingsV2.js
date: Thu, 05 Jan 2023 14:38:25 GMT
vary: Origin
cache-control: max-age=432000, private;max-age=86400
access-control-max-age: 108000
access-control-allow-origin:
access-control-allow-headers: *
access-control-allow-methods: GET,OPTIONS,POST
X-Firefox-Spdy: h2
c.evidon.com/sitenotice/3401/snthemes.js
200 OK 5.7 kB URL HTTP/2 c.evidon.com/sitenotice/3401/snthemes.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9a975aa3305c4011b3e07119d2376913
4545dc0986810ba851360f910219b34ce7c4446d
400f7ad9cb8378b5839d4f3449381d936f37fd0762f8507d283304c82068d122
GET /sitenotice/3401/snthemes.js HTTP/1.1
Host: c.evidon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://consent.dropbox.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "0e8f664fca39681028b4b07b5be34f2d:1659131785.898398"
last-modified: Fri, 29 Jul 2022 21:56:25 GMT
server: AkamaiNetStorage
content-encoding: gzip
expires: Sat, 07 Jan 2023 14:38:25 GMT
date: Thu, 05 Jan 2023 14:38:25 GMT
content-length: 5695
vary: Accept-Encoding, Origin
cache-control: max-age=172800, private;max-age=86400
access-control-max-age: 108000
access-control-allow-origin:
access-control-allow-headers: *
access-control-allow-methods: GET,OPTIONS,POST
X-Firefox-Spdy: h2
c.evidon.com/sitenotice/3401/dropbox/settingsV2.js
200 OK 1.8 kB URL HTTP/2 c.evidon.com/sitenotice/3401/dropbox/settingsV2.js
IP
File type JSON data\012- , ASCII text, with very long lines (5131), with no line terminators
Hash 80cadd2911999da42df51e6f78fe7bda
83afa035821f557485f095a3c0b8f8368dcd5bed
aa0f50586a48a041e16ec2bbec35ab0ce97d11137b0fff3a698975f0db946766
GET /sitenotice/3401/dropbox/settingsV2.js HTTP/1.1
Host: c.evidon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://consent.dropbox.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "7119db14253f426ac1ed52da3fd5d054:1662485692.434043"
last-modified: Tue, 06 Sep 2022 17:34:52 GMT
server: AkamaiNetStorage
content-encoding: gzip
expires: Sat, 07 Jan 2023 14:38:25 GMT
date: Thu, 05 Jan 2023 14:38:25 GMT
content-length: 1691
vary: Accept-Encoding, Origin
cache-control: max-age=172800, private;max-age=86400
access-control-max-age: 108000
access-control-allow-origin:
access-control-allow-headers: *
access-control-allow-methods: GET,OPTIONS,POST
X-Firefox-Spdy: h2
c.evidon.com/sitenotice/evidon-banner.js
200 OK 3.5 kB URL HTTP/2 c.evidon.com/sitenotice/evidon-banner.js
IP
File type ASCII text, with very long lines (12607), with no line terminators
Hash 304674456118422bd448366f7bb05879
c6549199a4fb419c05a3513238a89002307034b9
29f57f0aeee0a530b881df6908e653f58c6d570b05174b2e1a6bba2a75c4e068
GET /sitenotice/evidon-banner.js HTTP/1.1
Host: c.evidon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://consent.dropbox.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "953f08dcce4b8af3f743056f673c8514:1671558610.744236"
last-modified: Tue, 20 Dec 2022 17:50:10 GMT
server: AkamaiNetStorage
content-encoding: gzip
expires: Sat, 07 Jan 2023 14:38:25 GMT
date: Thu, 05 Jan 2023 14:38:25 GMT
content-length: 3535
vary: Accept-Encoding, Origin
cache-control: max-age=172800, private;max-age=86400
access-control-max-age: 108000
access-control-allow-origin:
access-control-allow-headers: *
access-control-allow-methods: GET,OPTIONS,POST
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 091ca6165972cea038769b7247a3613a
5acd962ed15000929643ac5293093084b0871195
8b967936f192e705c9bef2065d408750a37d23de2a890f095fbe773b86f7543b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=88863
Date: Thu, 05 Jan 2023 14:38:25 GMT
Etag: "63b59347-1d7"
Expires: Fri, 06 Jan 2023 15:19:28 GMT
Last-Modified: Wed, 04 Jan 2023 14:55:03 GMT
Server: ECS (nyb/1D07)
X-Cache: Miss from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: II_IuNNxn6WErz6RFugE1SNsu5VqKK8J3HSy7TbxbKlvG62M70JXsQ==
Age: 1465
l.evidon.com/site/v3/3401/59514/1/1/2/2/104138?consent=0®ulationid=0®ulationconsenttypeid=1&d=https%3A%2F%2Fapp.hellofax.com%2F
204 No Content 0 B URL HTTP/2 l.evidon.com/site/v3/3401/59514/1/1/2/2/104138?consent=0®ulationid=0®ulationconsenttypeid=1&d=https%3A%2F%2Fapp.hellofax.com%2F
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /site/v3/3401/59514/1/1/2/2/104138?consent=0®ulationid=0®ulationconsenttypeid=1&d=https%3A%2F%2Fapp.hellofax.com%2F HTTP/1.1
Host: l.evidon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://consent.dropbox.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Thu, 05 Jan 2023 14:38:26 GMT
x-powered-by: Express
etag: W/"a-bAsFyilMr4Ra1hIU5PyoyFRunpI"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 091ca6165972cea038769b7247a3613a
5acd962ed15000929643ac5293093084b0871195
8b967936f192e705c9bef2065d408750a37d23de2a890f095fbe773b86f7543b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=92340
Date: Thu, 05 Jan 2023 14:38:25 GMT
Etag: "63b59347-1d7"
Expires: Fri, 06 Jan 2023 16:17:25 GMT
Last-Modified: Wed, 04 Jan 2023 14:55:03 GMT
Server: ECS (nyb/1D12)
X-Cache: Miss from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: JCDn8xli9O12QZRUv2Y_UcjzoOeJVrJhqLd0cYO349DIg4zzFPMkeQ==
Age: 4942
tags.tiqcdn.com/utag/dropbox/hellosign/prod/utag.5.js?utv=ut4.48.202211161535
200 OK 35 kB URL HTTP/2 tags.tiqcdn.com/utag/dropbox/hellosign/prod/utag.5.js?utv=ut4.48.202211161535
IP
File type ASCII text, with very long lines (30666)
Hash c6ae8f3c89fad9026a44090462d0abcf
ecd66526f53679d170151f4c697986b51dd37a85
edb4753539d720c9378ed3279e9a3bfd1adb24929e0b45db46dddd28e5b5e45c
GET /utag/dropbox/hellosign/prod/utag.5.js?utv=ut4.48.202211161535 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.hellofax.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "5ab379aca54ed96b034ff7d055ab4bf8:1668612932.615981"
last-modified: Wed, 16 Nov 2022 15:35:32 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Fri, 20 Jan 2023 14:38:26 GMT
date: Thu, 05 Jan 2023 14:38:26 GMT
content-length: 35445
X-Firefox-Spdy: h2
tags.tiqcdn.com/utag/dropbox/hellosign/prod/utag.8.js?utv=ut4.48.202210281627
200 OK 5.8 kB URL HTTP/2 tags.tiqcdn.com/utag/dropbox/hellosign/prod/utag.8.js?utv=ut4.48.202210281627
IP
File type ASCII text, with very long lines (2761)
Hash b8d9021eaf9851a56d5a40fee0de4ac5
b9a40653010cf1b085a471643472b7a528f085d4
590b4ef91f8c5a9548c496c3f4f76c4ad255e2ee370f3022d8ba0ab14b4df0a8
GET /utag/dropbox/hellosign/prod/utag.8.js?utv=ut4.48.202210281627 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.hellofax.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "6ec30d54dbf79a9740aa50379a173dd2:1666974477.878126"
last-modified: Fri, 28 Oct 2022 16:27:57 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Fri, 20 Jan 2023 14:38:26 GMT
date: Thu, 05 Jan 2023 14:38:26 GMT
content-length: 5776
X-Firefox-Spdy: h2
tags.tiqcdn.com/utag/dropbox/hellosign/prod/utag.135.js?utv=ut4.48.202210262301
200 OK 3.6 kB URL HTTP/2 tags.tiqcdn.com/utag/dropbox/hellosign/prod/utag.135.js?utv=ut4.48.202210262301
IP
File type ASCII text, with very long lines (1502)
Hash 28a0991c98a802ecce42ab900fd88f3a
d6fb0420dbf7203f550fb63b1103ff9324b673f5
02e7a4cc9dee1c4e785c1ad6fda739bc3c35b4402963c5ef328b11fe56714326
GET /utag/dropbox/hellosign/prod/utag.135.js?utv=ut4.48.202210262301 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.hellofax.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "0a7682450c04f352f385854a2e54497c:1666825320.994779"
last-modified: Wed, 26 Oct 2022 23:02:00 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Fri, 20 Jan 2023 14:38:26 GMT
date: Thu, 05 Jan 2023 14:38:26 GMT
content-length: 3635
X-Firefox-Spdy: h2
tags.tiqcdn.com/utag/dropbox/hellosign/prod/utag.152.js?utv=ut4.48.202212060410
200 OK 2.6 kB URL HTTP/2 tags.tiqcdn.com/utag/dropbox/hellosign/prod/utag.152.js?utv=ut4.48.202212060410
IP
File type HTML document, ASCII text, with very long lines (5291)
Hash d34813bcf95e31d6b8263b0373b2ecd6
9e896ec7a80b0c50a9912d93f17f9443f78c654c
c74f3081bab273a4955ca709ac37e86e642f93207d426361669175fa3f542517
GET /utag/dropbox/hellosign/prod/utag.152.js?utv=ut4.48.202212060410 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.hellofax.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "deb565a25924986ec64b07e1e22de945:1670299848.122151"
last-modified: Tue, 06 Dec 2022 04:10:48 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Fri, 20 Jan 2023 14:38:26 GMT
date: Thu, 05 Jan 2023 14:38:26 GMT
content-length: 2628
X-Firefox-Spdy: h2
tags.tiqcdn.com/utag/dropbox/hellosign/prod/utag.162.js?utv=ut4.48.202212162230
200 OK 1.8 kB URL HTTP/2 tags.tiqcdn.com/utag/dropbox/hellosign/prod/utag.162.js?utv=ut4.48.202212162230
IP
File type ASCII text, with very long lines (1117)
Hash c7400607aa6585344523d66dad7fa5a6
a5af54127d287c6f8d31c2d0a9f93ff78117d637
9d19759fa6eedb6898d6256a7dd35d6755db0280e5ae831826676327fe14e71b
GET /utag/dropbox/hellosign/prod/utag.162.js?utv=ut4.48.202212162230 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.hellofax.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "92cb4f5a39e090f84f05e7f36951983d:1671229866.684164"
last-modified: Fri, 16 Dec 2022 22:31:06 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Fri, 20 Jan 2023 14:38:26 GMT
date: Thu, 05 Jan 2023 14:38:26 GMT
content-length: 1791
X-Firefox-Spdy: h2
l.evidon.com/site/v3/3401/59514/1/4/2/2/104138?consent=0®ulationid=0®ulationconsenttypeid=1&d=https%3A%2F%2Fapp.hellofax.com%2F
204 No Content 0 B URL HTTP/2 l.evidon.com/site/v3/3401/59514/1/4/2/2/104138?consent=0®ulationid=0®ulationconsenttypeid=1&d=https%3A%2F%2Fapp.hellofax.com%2F
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /site/v3/3401/59514/1/4/2/2/104138?consent=0®ulationid=0®ulationconsenttypeid=1&d=https%3A%2F%2Fapp.hellofax.com%2F HTTP/1.1
Host: l.evidon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://consent.dropbox.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Thu, 05 Jan 2023 14:38:26 GMT
x-powered-by: Express
etag: W/"a-bAsFyilMr4Ra1hIU5PyoyFRunpI"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=dropbox/hellosign/202212162230&cb=1672929496084
200 OK 2 B URL HTTP/2 tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=dropbox/hellosign/202212162230&cb=1672929496084
IP
File type ASCII text, with no line terminators
Hash 7bc0ee636b3b83484fc3b9348863bd22
ebbffb7d7ea5362a22bfa1bab0bfdeb1617cd610
a2c2339691fc48fbd14fb307292dff3e21222712d9240810742d7df0c6d74dfb
GET /utag/tiqapp/utag.v.js?a=dropbox/hellosign/202212162230&cb=1672929496084 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.hellofax.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "7bc0ee636b3b83484fc3b9348863bd22:1460653071"
last-modified: Thu, 14 Apr 2016 16:57:51 GMT
server: AkamaiNetStorage
content-length: 2
cache-control: max-age=600
expires: Thu, 05 Jan 2023 14:48:26 GMT
date: Thu, 05 Jan 2023 14:38:26 GMT
X-Firefox-Spdy: h2
t.contentsquare.net/uxa/4a39e5c4777d0.js
200 OK 92 kB URL HTTP/2 t.contentsquare.net/uxa/4a39e5c4777d0.js
IP
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash 4c288b4c1b9de6cb9dfd7d0e0c60c7fc
4a610ac75ec4640bbff17c5fba4bb19bc29cd9b4
e7e4c69623abd52ac6413cd80d46c8dfb0fd0af92ab26b15a020299406e3e34b
GET /uxa/4a39e5c4777d0.js HTTP/1.1
Host: t.contentsquare.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.hellofax.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 91967
date: Tue, 03 Jan 2023 08:59:00 GMT
last-modified: Tue, 03 Jan 2023 08:58:31 GMT
etag: "4c288b4c1b9de6cb9dfd7d0e0c60c7fc"
x-amz-server-side-encryption: AES256
cache-control: max-age=900
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: wJMj9OyQHtnKJMzWFW5xHPPsG0OrkczZJemodaMJbDbo2B6UrnVebw==
age: 0
timing-allow-origin: *
vary: Origin
X-Firefox-Spdy: h2
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 4.8 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13348)
Hash f1e2310b1595d083880f4929c6edbcb9
6c11a0c7b81c4a2d2d24935a99668d107fa1467f
99bc9c1eda19598dab3b8010bf7fb45f717bb7c5ec3e5d54c519e08a64b060f7
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.hellofax.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Wed, 04 Jan 2023 15:09:15 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=79692
date: Thu, 05 Jan 2023 14:38:26 GMT
content-length: 4773
x-cdn: AKAM
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 32ffeb885ef13e5f8cf4a7b71a0622c0
2a3e5ab9151f73a5a2dad754fe2d532462dfa0bf
dd0fc522b373f6f9898e871c039d4eb8a9f2fafa7e8e8406099e3d335a551a39
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6165
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 14:38:26 GMT
Last-Modified: Thu, 05 Jan 2023 12:55:42 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
www.everestjs.net/static/le/last-event-tag-latest.min.js
200 OK 2.7 kB URL HTTP/1.1 www.everestjs.net/static/le/last-event-tag-latest.min.js
IP
File type ASCII text, with very long lines (7027)
Hash c3a66e6f50b032dadb8cad25dc32492d
e80710faee38cff62d92bbc5d1f06606e9024a88
1c3799c14636066f1c903442bf67a335695dc440273e614daab754edbbf0828c
GET /static/le/last-event-tag-latest.min.js HTTP/1.1
Host: www.everestjs.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.hellofax.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: fZWe1ji7i4kPV3i+XAYRNU2Zv/UO+4UlQyJs1gwD5NXJEDTQwPNlr/q2ZhIQr2NHdaukuhNFNxg=
x-amz-request-id: AXPA3VKNGRX3YQP8
Last-Modified: Wed, 16 Jun 2021 15:18:41 GMT
ETag: "d5991c18a0042eb33f92c6b5b44ffe8d"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Encoding: gzip
Content-Length: 2663
Date: Thu, 05 Jan 2023 14:38:26 GMT
Connection: keep-alive
Vary: Accept-Encoding
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e92f347aa45b2b97ef11f4d6b9c9ae38
86cce7922b9fc6eae39ec33a453acb929dcb5f72
cca17ea0141cc16d91f9d58deec965b6ce90c6245eb8fed7f532e0ac353c7761
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 05 Jan 2023 14:38:26 GMT
Last-Modified: Thu, 05 Jan 2023 13:42:44 GMT
Server: ECS (nyb/1D0F)
X-Cache: Miss from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: -n7nH9Zonfcx4z6loy354JEFdXMFTuE9eYpfUL3xrIAYsgRC50sMqw==
Age: 3342
cdn.linkedin.oribi.io/partner/4551770/domain/marketing.hellofax.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/4551770/domain/marketing.hellofax.com/token
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /partner/4551770/domain/marketing.hellofax.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://marketing.hellofax.com/
Origin: https://marketing.hellofax.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
date: Thu, 05 Jan 2023 07:47:58 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: content-type
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LwSC9HOQOh2I__maTBgzeI1a4vY0TiFV_Glu-wZBj_WKTUiHOamn4g==
age: 24628
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=4551770&time=1672929496209&url=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=4551770&time=1672929496209&url=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=4551770&time=1672929496209&url=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.hellofax.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4551770%26time%3D1672929496209%26url%3Dhttps%253A%252F%252Fmarketing.hellofax.com%252Feditor%252Fview%252Fsuper_group_guid%252Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQJuNMW_nWwpEQAAAYWCXnUJDni04FHbe1nQjrXuEMy4rZ88U2olftuFqie5jEbHE2LfRFVe8bXeFQ; Max-Age=2592000; Expires=Sat, 04 Feb 2023 14:38:26 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQK7XjJzqhrREgAAAYWCXnUJud57NnRKOkdBuXzxpoe8ZvIwEuDDbzw5mYeQJJxjVFy0Z1qQRhmk6uE12Bmcsg; Max-Age=2592000; Expires=Sat, 04 Feb 2023 14:38:26 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&8ce0fc06-3003-45d2-8e21-0bedc2bca9ef"; domain=.linkedin.com; Path=/; Secure; Expires=Fri, 05-Jan-2024 14:38:26 GMT; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2462:u=1:x=1:i=1672929506:t=1673015906:v=2:sig=AQEarTbl2Fg_nvAGa1PgFQbiamDCsRR4"; Expires=Fri, 06 Jan 2023 14:38:26 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXxhUD4/XEkHRs/tVJYsg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 9365B21E562F4E6BB65ED997D1FED5B7 Ref B: OSL30EDGE0106 Ref C: 2023-01-05T14:38:26Z
date: Thu, 05 Jan 2023 14:38:26 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b815e7b1a5f00b7cff7f2a68bb723f77
c944dc7284f4758dfebbd1b8ab4b7b327259f651
f1701c75e48206c4405afcd5a60ae3141ff4db9f811ec9ab4cdd9090af666f26
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 14:38:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/983307503/?random=1672929496339&cv=11&fst=1672929496339&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=2&url=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&auid=1952222193.1672929496&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 925 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/983307503/?random=1672929496339&cv=11&fst=1672929496339&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=2&url=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&auid=1952222193.1672929496&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (1977), with no line terminators
Hash ef6871ecda53e7f3449dc23d33f00918
07a800496f70d586c92ae1b367066a60b8396033
c816befb065fdb1f4cee42bad07e044e8d5cca1f5f2000bd75bf4d57b363d2e4
GET /pagead/viewthroughconversion/983307503/?random=1672929496339&cv=11&fst=1672929496339&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=2&url=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&tiba=Dropbox&did=dYmQxMT&gdid=dYmQxMT&auid=1952222193.1672929496&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.hellofax.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 05 Jan 2023 14:38:26 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 925
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 05-Jan-2023 14:53:26 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 9b439f0795126afbee81d7f38da33ad8
ec98ae4741b995b95205fbbe3485f5331d8e3801
c267e180763219779fdf0d3782c00c03400c048bb036b4a326a4eef781c9f481
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2305
Cache-Control: max-age=164589
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 14:38:26 GMT
Etag: "63b6b7ce-138"
Expires: Sat, 07 Jan 2023 12:21:35 GMT
Last-Modified: Thu, 05 Jan 2023 11:43:10 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 312
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b815e7b1a5f00b7cff7f2a68bb723f77
c944dc7284f4758dfebbd1b8ab4b7b327259f651
f1701c75e48206c4405afcd5a60ae3141ff4db9f811ec9ab4cdd9090af666f26
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 14:38:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 974e444c7b66a760e0fdec04b8bebb82
23d1de086afcfbdedbd5c60fcef69c88b840b448
458cf84b0a13820b027dfeafe101e87d2cc692fc998dc0347268df5afd816aca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 14:38:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dpiprodesntls.112.2o7.net/b/ss/dpi.prod.esntls/1/JS-2.22.3/s05949788941828?AQB=1&ndh=1&pf=1&t=5%2F0%2F2023%2014%3A38%3A16%204%200&fid=77D46B2F01F3D183-0CFAAFCE81C7DA1D&ce=UTF-8&ns=hellosign&cdp=2&pageName=marketing.hellofax.com%7Ceditor%7Cview%7Csuper_group_guid%7Cb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&g=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&c.&getPageName=4.2&getPercentPageViewed=5.0&p_fo=3.0&getPageLoadTime=2.0.1&getPreviousValue=3.0&getVisitDuration=2.1&inList=3.0&apl=4.0&getNewRepeat=3.0&getVisitNum=4.2&getTimeParting=6.3&getTimeSinceLastVisit=2.0&.c&cc=USD&server=marketing.hellofax.com&events=event14&c1=en-US&v1=D%3Dg&c2=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&h2=marketing.hellofax.com%3Aeditor%3Aview%3Asuper_group_guid%3Ab97ebb00e0f5ed635f7b5e517a8345e08a3e22db&c3=No%20Previous%20Page&v3=%2B1&c4=No%20Percent%20of%20Page%20Viewed&c5=first%20hit%20of%20visit&v5=New&c6=1280x1024&v6=1&v7=First%20Visit&v11=New%20Visitor&c12=d028fffc-1aff-46d0-9ca7-9b4c297825ca&v13=01%2F05%2F2023&v15=Visitor%20API%20Missing&v16=marketing.hellofax.com&v17=%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&c19=dpi.prod.esntls&c20=D%3DpageName&v20=editor&v21=view&v22=super_group_guid&c23=marketing.hellofax.com%7C2.22.3%7CNo%20Visitor%20API%7CUnknown%20ID%20state%7CUnknown%20Target%20Version%7CUnknown%20DIL%20version&v23=D%3DpageName&c25=marketing.hellofax.com&v25=Dropbox&v46=0.6256033513023388_1672929496293&v55=0185825e4bc60011f213e8f369b500050006400900918&s=1280x1024&c=24&j=1.6&v=N&k=Y&AQE=1
302 Found 0 B URL HTTP/2 dpiprodesntls.112.2o7.net/b/ss/dpi.prod.esntls/1/JS-2.22.3/s05949788941828?AQB=1&ndh=1&pf=1&t=5%2F0%2F2023%2014%3A38%3A16%204%200&fid=77D46B2F01F3D183-0CFAAFCE81C7DA1D&ce=UTF-8&ns=hellosign&cdp=2&pageName=marketing.hellofax.com%7Ceditor%7Cview%7Csuper_group_guid%7Cb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&g=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&c.&getPageName=4.2&getPercentPageViewed=5.0&p_fo=3.0&getPageLoadTime=2.0.1&getPreviousValue=3.0&getVisitDuration=2.1&inList=3.0&apl=4.0&getNewRepeat=3.0&getVisitNum=4.2&getTimeParting=6.3&getTimeSinceLastVisit=2.0&.c&cc=USD&server=marketing.hellofax.com&events=event14&c1=en-US&v1=D%3Dg&c2=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&h2=marketing.hellofax.com%3Aeditor%3Aview%3Asuper_group_guid%3Ab97ebb00e0f5ed635f7b5e517a8345e08a3e22db&c3=No%20Previous%20Page&v3=%2B1&c4=No%20Percent%20of%20Page%20Viewed&c5=first%20hit%20of%20visit&v5=New&c6=1280x1024&v6=1&v7=First%20Visit&v11=New%20Visitor&c12=d028fffc-1aff-46d0-9ca7-9b4c297825ca&v13=01%2F05%2F2023&v15=Visitor%20API%20Missing&v16=marketing.hellofax.com&v17=%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&c19=dpi.prod.esntls&c20=D%3DpageName&v20=editor&v21=view&v22=super_group_guid&c23=marketing.hellofax.com%7C2.22.3%7CNo%20Visitor%20API%7CUnknown%20ID%20state%7CUnknown%20Target%20Version%7CUnknown%20DIL%20version&v23=D%3DpageName&c25=marketing.hellofax.com&v25=Dropbox&v46=0.6256033513023388_1672929496293&v55=0185825e4bc60011f213e8f369b500050006400900918&s=1280x1024&c=24&j=1.6&v=N&k=Y&AQE=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/ss/dpi.prod.esntls/1/JS-2.22.3/s05949788941828?AQB=1&ndh=1&pf=1&t=5%2F0%2F2023%2014%3A38%3A16%204%200&fid=77D46B2F01F3D183-0CFAAFCE81C7DA1D&ce=UTF-8&ns=hellosign&cdp=2&pageName=marketing.hellofax.com%7Ceditor%7Cview%7Csuper_group_guid%7Cb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&g=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&c.&getPageName=4.2&getPercentPageViewed=5.0&p_fo=3.0&getPageLoadTime=2.0.1&getPreviousValue=3.0&getVisitDuration=2.1&inList=3.0&apl=4.0&getNewRepeat=3.0&getVisitNum=4.2&getTimeParting=6.3&getTimeSinceLastVisit=2.0&.c&cc=USD&server=marketing.hellofax.com&events=event14&c1=en-US&v1=D%3Dg&c2=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&h2=marketing.hellofax.com%3Aeditor%3Aview%3Asuper_group_guid%3Ab97ebb00e0f5ed635f7b5e517a8345e08a3e22db&c3=No%20Previous%20Page&v3=%2B1&c4=No%20Percent%20of%20Page%20Viewed&c5=first%20hit%20of%20visit&v5=New&c6=1280x1024&v6=1&v7=First%20Visit&v11=New%20Visitor&c12=d028fffc-1aff-46d0-9ca7-9b4c297825ca&v13=01%2F05%2F2023&v15=Visitor%20API%20Missing&v16=marketing.hellofax.com&v17=%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&c19=dpi.prod.esntls&c20=D%3DpageName&v20=editor&v21=view&v22=super_group_guid&c23=marketing.hellofax.com%7C2.22.3%7CNo%20Visitor%20API%7CUnknown%20ID%20state%7CUnknown%20Target%20Version%7CUnknown%20DIL%20version&v23=D%3DpageName&c25=marketing.hellofax.com&v25=Dropbox&v46=0.6256033513023388_1672929496293&v55=0185825e4bc60011f213e8f369b500050006400900918&s=1280x1024&c=24&j=1.6&v=N&k=Y&AQE=1 HTTP/1.1
Host: dpiprodesntls.112.2o7.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.hellofax.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
access-control-allow-origin: *
vary: Origin
date: Thu, 05 Jan 2023 14:38:26 GMT
content-type: text/plain;charset=utf-8
expires: Wed, 04 Jan 2023 14:38:26 GMT
last-modified: Fri, 06 Jan 2023 14:38:26 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
set-cookie: s_vi=[CS]v1|31DB70716FCA2BD3-600013A2C22C0F35[CE]; Path=/; Domain=dpiprodesntls.112.2o7.net; Max-Age=63072000; Expires=Sat, 04 Jan 2025 14:38:38 GMT; SameSite=None; Secure
location: https://dpiprodesntls.112.2o7.net/b/ss/dpi.prod.esntls/1/JS-2.22.3/s05949788941828?AQB=1&pccr=true&vidn=31DB70716FCA2BD3-600013A2C22C0F35&ndh=1&pf=1&t=5%2F0%2F2023%2014%3A38%3A16%204%200&fid=77D46B2F01F3D183-0CFAAFCE81C7DA1D&ce=UTF-8&ns=hellosign&cdp=2&pageName=marketing.hellofax.com%7Ceditor%7Cview%7Csuper_group_guid%7Cb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&g=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&c.&getPageName=4.2&getPercentPageViewed=5.0&p_fo=3.0&getPageLoadTime=2.0.1&getPreviousValue=3.0&getVisitDuration=2.1&inList=3.0&apl=4.0&getNewRepeat=3.0&getVisitNum=4.2&getTimeParting=6.3&getTimeSinceLastVisit=2.0&.c&cc=USD&server=marketing.hellofax.com&events=event14&c1=en-US&v1=D%3Dg&c2=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&h2=marketing.hellofax.com%3Aeditor%3Aview%3Asuper_group_guid%3Ab97ebb00e0f5ed635f7b5e517a8345e08a3e22db&c3=No%20Previous%20Page&v3=%2B1&c4=No%20Percent%20of%20Page%20Viewed&c5=first%20hit%20of%20visit&v5=New&c6=1280x1024&v6=1&v7=First%20Visit&v11=New%20Visitor&c12=d028fffc-1aff-46d0-9ca7-9b4c297825ca&v13=01%2F05%2F2023&v15=Visitor%20API%20Missing&v16=marketing.hellofax.com&v17=%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&c19=dpi.prod.esntls&c20=D%3DpageName&v20=editor&v21=view&v22=super_group_guid&c23=marketing.hellofax.com%7C2.22.3%7CNo%20Visitor%20API%7CUnknown%20ID%20state%7CUnknown%20Target%20Version%7CUnknown%20DIL%20version&v23=D%3DpageName&c25=marketing.hellofax.com&v25=Dropbox&v46=0.6256033513023388_1672929496293&v55=0185825e4bc60011f213e8f369b500050006400900918&s=1280x1024&c=24&j=1.6&v=N&k=Y&AQE=1
content-length: 0
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a6cdf191deb0e291350d9d91d9ab97a7
fb82c911866268a7d33d2743dbe0328199c7121a
414acc6f6d050d52d88f9706e71d6a0e3eceb4dc41edcce74ec63eb63d8fb1cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 14:38:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4551770%26time%3D1672929496209%26url%3Dhttps%253A%252F%252Fmarketing.hellofax.com%252Feditor%252Fview%252Fsuper_group_guid%252Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4551770%26time%3D1672929496209%26url%3Dhttps%253A%252F%252Fmarketing.hellofax.com%252Feditor%252Fview%252Fsuper_group_guid%252Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4551770%26time%3D1672929496209%26url%3Dhttps%253A%252F%252Fmarketing.hellofax.com%252Feditor%252Fview%252Fsuper_group_guid%252Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://marketing.hellofax.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=4551770&time=1672929496209&url=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&26677f71-b4a9-4f61-8ce8-302b3e8aa4ec"; Domain=.linkedin.com; Expires=Fri, 05-Jan-2024 14:38:26 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&20230105143826306a0458-3d7e-48e9-835a-eb70a22344cdAQF4VxJUmDySJ3M2sC7cC5Pu4l7_9hQI"; Domain=.www.linkedin.com; Expires=Fri, 05-Jan-2024 14:38:26 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NzI5Mjk1MDY7MjswMjHt48aEgKwIFkUlikyTMfUR4ym44TX4dqABqEP2zqBDVg==; Domain=.linkedin.com; Expires=Tue, 04 Jul 2023 14:38:26 GMT; Path=/; Secure; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2439:u=1:x=1:i=1672929506:t=1673015906:v=2:sig=AQF7k3gvP3LvjhQlDoX6vz9EUX-9ETpF"; Expires=Fri, 06 Jan 2023 14:38:26 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com *.microsoft.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src blob: 'self'; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' *.linkedin.com teams.microsoft.com client.learningapp.microsoft.com; report-uri /security/csp?e=p&f=t
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXxhUD7YU8FTvu6K/ylfQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 1D894CBFB2154002A352E58B8266DF0E Ref B: OSL30EDGE0106 Ref C: 2023-01-05T14:38:26Z
date: Thu, 05 Jan 2023 14:38:26 GMT
content-length: 0
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/983307503/?random=1672929496339&cv=11&fst=1672927200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=2&url=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&tiba=Dropbox&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3175743480&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/983307503/?random=1672929496339&cv=11&fst=1672927200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=2&url=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&tiba=Dropbox&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3175743480&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/983307503/?random=1672929496339&cv=11&fst=1672927200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=2&url=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&tiba=Dropbox&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3175743480&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.hellofax.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 05 Jan 2023 14:38:26 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/983307503/?random=1672929496339&cv=11&fst=1672927200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=2&url=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&tiba=Dropbox&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3175743480&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/983307503/?random=1672929496339&cv=11&fst=1672927200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=2&url=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&tiba=Dropbox&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3175743480&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/983307503/?random=1672929496339&cv=11&fst=1672927200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=2&url=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&tiba=Dropbox&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3175743480&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.hellofax.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 05 Jan 2023 14:38:26 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dpiprodesntls.112.2o7.net/b/ss/dpi.prod.esntls/1/JS-2.22.3/s05949788941828?AQB=1&pccr=true&vidn=31DB70716FCA2BD3-600013A2C22C0F35&ndh=1&pf=1&t=5%2F0%2F2023%2014%3A38%3A16%204%200&fid=77D46B2F01F3D183-0CFAAFCE81C7DA1D&ce=UTF-8&ns=hellosign&cdp=2&pageName=marketing.hellofax.com%7Ceditor%7Cview%7Csuper_group_guid%7Cb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&g=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&c.&getPageName=4.2&getPercentPageViewed=5.0&p_fo=3.0&getPageLoadTime=2.0.1&getPreviousValue=3.0&getVisitDuration=2.1&inList=3.0&apl=4.0&getNewRepeat=3.0&getVisitNum=4.2&getTimeParting=6.3&getTimeSinceLastVisit=2.0&.c&cc=USD&server=marketing.hellofax.com&events=event14&c1=en-US&v1=D%3Dg&c2=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&h2=marketing.hellofax.com%3Aeditor%3Aview%3Asuper_group_guid%3Ab97ebb00e0f5ed635f7b5e517a8345e08a3e22db&c3=No%20Previous%20Page&v3=%2B1&c4=No%20Percent%20of%20Page%20Viewed&c5=first%20hit%20of%20visit&v5=New&c6=1280x1024&v6=1&v7=First%20Visit&v11=New%20Visitor&c12=d028fffc-1aff-46d0-9ca7-9b4c297825ca&v13=01%2F05%2F2023&v15=Visitor%20API%20Missing&v16=marketing.hellofax.com&v17=%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&c19=dpi.prod.esntls&c20=D%3DpageName&v20=editor&v21=view&v22=super_group_guid&c23=marketing.hellofax.com%7C2.22.3%7CNo%20Visitor%20API%7CUnknown%20ID%20state%7CUnknown%20Target%20Version%7CUnknown%20DIL%20version&v23=D%3DpageName&c25=marketing.hellofax.com&v25=Dropbox&v46=0.6256033513023388_1672929496293&v55=0185825e4bc60011f213e8f369b500050006400900918&s=1280x1024&c=24&j=1.6&v=N&k=Y&AQE=1
200 OK 43 B URL HTTP/2 dpiprodesntls.112.2o7.net/b/ss/dpi.prod.esntls/1/JS-2.22.3/s05949788941828?AQB=1&pccr=true&vidn=31DB70716FCA2BD3-600013A2C22C0F35&ndh=1&pf=1&t=5%2F0%2F2023%2014%3A38%3A16%204%200&fid=77D46B2F01F3D183-0CFAAFCE81C7DA1D&ce=UTF-8&ns=hellosign&cdp=2&pageName=marketing.hellofax.com%7Ceditor%7Cview%7Csuper_group_guid%7Cb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&g=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&c.&getPageName=4.2&getPercentPageViewed=5.0&p_fo=3.0&getPageLoadTime=2.0.1&getPreviousValue=3.0&getVisitDuration=2.1&inList=3.0&apl=4.0&getNewRepeat=3.0&getVisitNum=4.2&getTimeParting=6.3&getTimeSinceLastVisit=2.0&.c&cc=USD&server=marketing.hellofax.com&events=event14&c1=en-US&v1=D%3Dg&c2=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&h2=marketing.hellofax.com%3Aeditor%3Aview%3Asuper_group_guid%3Ab97ebb00e0f5ed635f7b5e517a8345e08a3e22db&c3=No%20Previous%20Page&v3=%2B1&c4=No%20Percent%20of%20Page%20Viewed&c5=first%20hit%20of%20visit&v5=New&c6=1280x1024&v6=1&v7=First%20Visit&v11=New%20Visitor&c12=d028fffc-1aff-46d0-9ca7-9b4c297825ca&v13=01%2F05%2F2023&v15=Visitor%20API%20Missing&v16=marketing.hellofax.com&v17=%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&c19=dpi.prod.esntls&c20=D%3DpageName&v20=editor&v21=view&v22=super_group_guid&c23=marketing.hellofax.com%7C2.22.3%7CNo%20Visitor%20API%7CUnknown%20ID%20state%7CUnknown%20Target%20Version%7CUnknown%20DIL%20version&v23=D%3DpageName&c25=marketing.hellofax.com&v25=Dropbox&v46=0.6256033513023388_1672929496293&v55=0185825e4bc60011f213e8f369b500050006400900918&s=1280x1024&c=24&j=1.6&v=N&k=Y&AQE=1
IP
File type GIF image data, version 89a, 2 x 2\012- data
Hash ad480fd0732d0f6f1a8b06359e3a42bb
a544538683a2dfe574eeb2e358ac8fcc78289d50
a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506
GET /b/ss/dpi.prod.esntls/1/JS-2.22.3/s05949788941828?AQB=1&pccr=true&vidn=31DB70716FCA2BD3-600013A2C22C0F35&ndh=1&pf=1&t=5%2F0%2F2023%2014%3A38%3A16%204%200&fid=77D46B2F01F3D183-0CFAAFCE81C7DA1D&ce=UTF-8&ns=hellosign&cdp=2&pageName=marketing.hellofax.com%7Ceditor%7Cview%7Csuper_group_guid%7Cb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&g=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&c.&getPageName=4.2&getPercentPageViewed=5.0&p_fo=3.0&getPageLoadTime=2.0.1&getPreviousValue=3.0&getVisitDuration=2.1&inList=3.0&apl=4.0&getNewRepeat=3.0&getVisitNum=4.2&getTimeParting=6.3&getTimeSinceLastVisit=2.0&.c&cc=USD&server=marketing.hellofax.com&events=event14&c1=en-US&v1=D%3Dg&c2=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&h2=marketing.hellofax.com%3Aeditor%3Aview%3Asuper_group_guid%3Ab97ebb00e0f5ed635f7b5e517a8345e08a3e22db&c3=No%20Previous%20Page&v3=%2B1&c4=No%20Percent%20of%20Page%20Viewed&c5=first%20hit%20of%20visit&v5=New&c6=1280x1024&v6=1&v7=First%20Visit&v11=New%20Visitor&c12=d028fffc-1aff-46d0-9ca7-9b4c297825ca&v13=01%2F05%2F2023&v15=Visitor%20API%20Missing&v16=marketing.hellofax.com&v17=%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&c19=dpi.prod.esntls&c20=D%3DpageName&v20=editor&v21=view&v22=super_group_guid&c23=marketing.hellofax.com%7C2.22.3%7CNo%20Visitor%20API%7CUnknown%20ID%20state%7CUnknown%20Target%20Version%7CUnknown%20DIL%20version&v23=D%3DpageName&c25=marketing.hellofax.com&v25=Dropbox&v46=0.6256033513023388_1672929496293&v55=0185825e4bc60011f213e8f369b500050006400900918&s=1280x1024&c=24&j=1.6&v=N&k=Y&AQE=1 HTTP/1.1
Host: dpiprodesntls.112.2o7.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://marketing.hellofax.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
date: Thu, 05 Jan 2023 14:38:26 GMT
expires: Wed, 04 Jan 2023 14:38:26 GMT
last-modified: Fri, 06 Jan 2023 14:38:26 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
set-cookie: s_vi=[CS]v1|31DB7071742F743D-400010400232B7E1[CE]; Path=/; Domain=dpiprodesntls.112.2o7.net; Max-Age=63072000; Expires=Sat, 04 Jan 2025 14:38:38 GMT; SameSite=None; Secure
etag: 3592588760340955136-4619374078643582944
vary: *
content-type: image/gif;charset=utf-8
content-length: 43
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/983307503/?random=1672929496514&cv=11&fst=1672927200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=2&url=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&tiba=Dropbox&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4189408910&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/983307503/?random=1672929496514&cv=11&fst=1672927200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=2&url=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&tiba=Dropbox&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4189408910&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/983307503/?random=1672929496514&cv=11&fst=1672927200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=2&url=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&tiba=Dropbox&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4189408910&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.hellofax.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 05 Jan 2023 14:38:26 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/983307503/?random=1672929496514&cv=11&fst=1672927200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=2&url=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&tiba=Dropbox&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4189408910&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/983307503/?random=1672929496514&cv=11&fst=1672927200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=2&url=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&tiba=Dropbox&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4189408910&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/983307503/?random=1672929496514&cv=11&fst=1672927200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=2&url=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&tiba=Dropbox&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4189408910&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.hellofax.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 05 Jan 2023 14:38:26 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3c9ae1015474fb56273490512807cef4
03cd8827553652d6a8a0becc76997f7ffe2e23f8
dceac28e6aae42862d52fe3561bb10432af2913a7b900cc2b266f0e622d91084
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 14:38:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
flex.msn.com/mstag/tag//analytics.js?ver=1206030100
400 Bad Request 194 B URL HTTP/2 flex.msn.com/mstag/tag//analytics.js?ver=1206030100
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with no line terminators
Hash caecbf69c577561f62f74d9e79a1867e
f165e342f6ccf1c63433139b9b532cdee3d87277
d4eb1b87b9b0f8e22d4002ec6ac3c04d430a7b89e5f963894530178a8aaca387
GET /mstag/tag//analytics.js?ver=1206030100 HTTP/1.1
Host: flex.msn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.hellofax.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 400 Bad Request
x-msedge-ref: 04uC2YwAAAAC4PneXoHOIQ4UgFOesUtkLT1NMMzBFREdFMDUyMgBFZGdl
date: Thu, 05 Jan 2023 14:38:26 GMT
X-Firefox-Spdy: h2
dpiprodesntls.112.2o7.net/b/ss/dpi.prod.esntls/1/JS-2.22.3/s07941222874595?AQB=1&pccr=true&vidn=31DB7071047A11D3-40000C4B622F4806&ndh=1&pf=1&t=5%2F0%2F2023%2014%3A38%3A16%204%200&fid=77D46B2F01F3D183-0CFAAFCE81C7DA1D&ce=UTF-8&ns=hellosign&cdp=2&pageName=marketing.hellofax.com%7Ceditor%7Cview%7Csuper_group_guid%7Cb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&g=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&cc=USD&v11=New%20Visitor&v46=0.6256033513023388_1672929496293&v55=0185825e4bc60011f213e8f369b500050006400900918&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&lrt=270&AQE=1
200 OK 43 B URL HTTP/2 dpiprodesntls.112.2o7.net/b/ss/dpi.prod.esntls/1/JS-2.22.3/s07941222874595?AQB=1&pccr=true&vidn=31DB7071047A11D3-40000C4B622F4806&ndh=1&pf=1&t=5%2F0%2F2023%2014%3A38%3A16%204%200&fid=77D46B2F01F3D183-0CFAAFCE81C7DA1D&ce=UTF-8&ns=hellosign&cdp=2&pageName=marketing.hellofax.com%7Ceditor%7Cview%7Csuper_group_guid%7Cb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&g=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&cc=USD&v11=New%20Visitor&v46=0.6256033513023388_1672929496293&v55=0185825e4bc60011f213e8f369b500050006400900918&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&lrt=270&AQE=1
IP
File type GIF image data, version 89a, 2 x 2\012- data
Hash ad480fd0732d0f6f1a8b06359e3a42bb
a544538683a2dfe574eeb2e358ac8fcc78289d50
a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506
GET /b/ss/dpi.prod.esntls/1/JS-2.22.3/s07941222874595?AQB=1&pccr=true&vidn=31DB7071047A11D3-40000C4B622F4806&ndh=1&pf=1&t=5%2F0%2F2023%2014%3A38%3A16%204%200&fid=77D46B2F01F3D183-0CFAAFCE81C7DA1D&ce=UTF-8&ns=hellosign&cdp=2&pageName=marketing.hellofax.com%7Ceditor%7Cview%7Csuper_group_guid%7Cb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&g=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&cc=USD&v11=New%20Visitor&v46=0.6256033513023388_1672929496293&v55=0185825e4bc60011f213e8f369b500050006400900918&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&lrt=270&AQE=1 HTTP/1.1
Host: dpiprodesntls.112.2o7.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://marketing.hellofax.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
date: Thu, 05 Jan 2023 14:38:26 GMT
expires: Wed, 04 Jan 2023 14:38:26 GMT
last-modified: Fri, 06 Jan 2023 14:38:26 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
set-cookie: s_vi=[CS]v1|31DB7071047A5B22-60000C4B622F482D[CE]; Path=/; Domain=dpiprodesntls.112.2o7.net; Max-Age=63072000; Expires=Sat, 04 Jan 2025 14:38:38 GMT; SameSite=None; Secure
etag: 3592588758466822144-4619827126289254444
vary: *
content-type: image/gif;charset=utf-8
content-length: 43
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=4551770&time=1672929496209&url=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=4551770&time=1672929496209&url=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=4551770&time=1672929496209&url=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://marketing.hellofax.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&46d5d88c-2e26-435e-8e01-ca1fa9bc14aa"; domain=.linkedin.com; Path=/; Secure; Expires=Fri, 05-Jan-2024 14:38:26 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2403:u=1:x=1:i=1672929506:t=1673015906:v=2:sig=AQFlAnEqJFPQqnUUa-7uXl4HstuOi9FC"; Expires=Fri, 06 Jan 2023 14:38:26 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXxhUD+Qw+RHuS5Ls8SWA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 6D2873FC2932411B9FA54F3BA5AB1F23 Ref B: OSL30EDGE0106 Ref C: 2023-01-05T14:38:26Z
date: Thu, 05 Jan 2023 14:38:26 GMT
content-length: 0
X-Firefox-Spdy: h2
dpiprodesntls.112.2o7.net/b/ss/dpi.prod.esntls/1/JS-2.22.3/s07999122524196?AQB=1&ndh=1&pf=1&t=5%2F0%2F2023%2014%3A38%3A19%204%200&fid=77D46B2F01F3D183-0CFAAFCE81C7DA1D&ce=UTF-8&ns=hellosign&cdp=2&pageName=marketing.hellofax.com%7Ceditor%7Cview%7Csuper_group_guid%7Cb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&g=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&cc=USD&v11=New%20Visitor&v46=0.6256033513023388_1672929496293&v55=0185825e4bc60011f213e8f369b500050006400900918&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&lrt=86&AQE=1
302 Found 0 B URL HTTP/2 dpiprodesntls.112.2o7.net/b/ss/dpi.prod.esntls/1/JS-2.22.3/s07999122524196?AQB=1&ndh=1&pf=1&t=5%2F0%2F2023%2014%3A38%3A19%204%200&fid=77D46B2F01F3D183-0CFAAFCE81C7DA1D&ce=UTF-8&ns=hellosign&cdp=2&pageName=marketing.hellofax.com%7Ceditor%7Cview%7Csuper_group_guid%7Cb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&g=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&cc=USD&v11=New%20Visitor&v46=0.6256033513023388_1672929496293&v55=0185825e4bc60011f213e8f369b500050006400900918&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&lrt=86&AQE=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/ss/dpi.prod.esntls/1/JS-2.22.3/s07999122524196?AQB=1&ndh=1&pf=1&t=5%2F0%2F2023%2014%3A38%3A19%204%200&fid=77D46B2F01F3D183-0CFAAFCE81C7DA1D&ce=UTF-8&ns=hellosign&cdp=2&pageName=marketing.hellofax.com%7Ceditor%7Cview%7Csuper_group_guid%7Cb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&g=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&cc=USD&v11=New%20Visitor&v46=0.6256033513023388_1672929496293&v55=0185825e4bc60011f213e8f369b500050006400900918&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&lrt=86&AQE=1 HTTP/1.1
Host: dpiprodesntls.112.2o7.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.hellofax.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
access-control-allow-origin: *
vary: Origin
date: Thu, 05 Jan 2023 14:38:29 GMT
content-type: text/plain;charset=utf-8
expires: Wed, 04 Jan 2023 14:38:29 GMT
last-modified: Fri, 06 Jan 2023 14:38:29 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
set-cookie: s_vi=[CS]v1|31DB7072F94C7438-40000D3EA2256CC7[CE]; Path=/; Domain=dpiprodesntls.112.2o7.net; Max-Age=63072000; Expires=Sat, 04 Jan 2025 14:38:38 GMT; SameSite=None; Secure
location: https://dpiprodesntls.112.2o7.net/b/ss/dpi.prod.esntls/1/JS-2.22.3/s07999122524196?AQB=1&pccr=true&vidn=31DB7072F94C7438-40000D3EA2256CC7&ndh=1&pf=1&t=5%2F0%2F2023%2014%3A38%3A19%204%200&fid=77D46B2F01F3D183-0CFAAFCE81C7DA1D&ce=UTF-8&ns=hellosign&cdp=2&pageName=marketing.hellofax.com%7Ceditor%7Cview%7Csuper_group_guid%7Cb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&g=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&cc=USD&v11=New%20Visitor&v46=0.6256033513023388_1672929496293&v55=0185825e4bc60011f213e8f369b500050006400900918&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&lrt=86&AQE=1
content-length: 0
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
dpiprodesntls.112.2o7.net/b/ss/dpi.prod.esntls/1/JS-2.22.3/s07999122524196?AQB=1&pccr=true&vidn=31DB7072F94C7438-40000D3EA2256CC7&ndh=1&pf=1&t=5%2F0%2F2023%2014%3A38%3A19%204%200&fid=77D46B2F01F3D183-0CFAAFCE81C7DA1D&ce=UTF-8&ns=hellosign&cdp=2&pageName=marketing.hellofax.com%7Ceditor%7Cview%7Csuper_group_guid%7Cb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&g=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&cc=USD&v11=New%20Visitor&v46=0.6256033513023388_1672929496293&v55=0185825e4bc60011f213e8f369b500050006400900918&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&lrt=86&AQE=1
200 OK 43 B URL HTTP/2 dpiprodesntls.112.2o7.net/b/ss/dpi.prod.esntls/1/JS-2.22.3/s07999122524196?AQB=1&pccr=true&vidn=31DB7072F94C7438-40000D3EA2256CC7&ndh=1&pf=1&t=5%2F0%2F2023%2014%3A38%3A19%204%200&fid=77D46B2F01F3D183-0CFAAFCE81C7DA1D&ce=UTF-8&ns=hellosign&cdp=2&pageName=marketing.hellofax.com%7Ceditor%7Cview%7Csuper_group_guid%7Cb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&g=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&cc=USD&v11=New%20Visitor&v46=0.6256033513023388_1672929496293&v55=0185825e4bc60011f213e8f369b500050006400900918&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&lrt=86&AQE=1
IP
File type GIF image data, version 89a, 2 x 2\012- data
Hash ad480fd0732d0f6f1a8b06359e3a42bb
a544538683a2dfe574eeb2e358ac8fcc78289d50
a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506
GET /b/ss/dpi.prod.esntls/1/JS-2.22.3/s07999122524196?AQB=1&pccr=true&vidn=31DB7072F94C7438-40000D3EA2256CC7&ndh=1&pf=1&t=5%2F0%2F2023%2014%3A38%3A19%204%200&fid=77D46B2F01F3D183-0CFAAFCE81C7DA1D&ce=UTF-8&ns=hellosign&cdp=2&pageName=marketing.hellofax.com%7Ceditor%7Cview%7Csuper_group_guid%7Cb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&g=https%3A%2F%2Fmarketing.hellofax.com%2Feditor%2Fview%2Fsuper_group_guid%2Fb97ebb00e0f5ed635f7b5e517a8345e08a3e22db&cc=USD&v11=New%20Visitor&v46=0.6256033513023388_1672929496293&v55=0185825e4bc60011f213e8f369b500050006400900918&pe=lnk_o&pev2=no%20link_name&s=1280x1024&c=24&j=1.6&v=N&k=Y&lrt=86&AQE=1 HTTP/1.1
Host: dpiprodesntls.112.2o7.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://marketing.hellofax.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
date: Thu, 05 Jan 2023 14:38:29 GMT
expires: Wed, 04 Jan 2023 14:38:29 GMT
last-modified: Fri, 06 Jan 2023 14:38:29 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
set-cookie: s_vi=[CS]v1|31DB7072A0B8DFBA-60001845C2301074[CE]; Path=/; Domain=dpiprodesntls.112.2o7.net; Max-Age=63072000; Expires=Sat, 04 Jan 2025 14:38:38 GMT; SameSite=None; Secure
etag: 3592588765383131136-4619805111897559154
vary: *
content-type: image/gif;charset=utf-8
content-length: 43
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
client-api.arkoselabs.com/v2/07071A28-2099-0596-6DA4-8CCD9C580290/api.js
200 OK 0 B URL HTTP/2 client-api.arkoselabs.com/v2/07071A28-2099-0596-6DA4-8CCD9C580290/api.js
IP
GET /v2/07071A28-2099-0596-6DA4-8CCD9C580290/api.js HTTP/1.1
Host: client-api.arkoselabs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.hellofax.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 05 Jan 2023 14:38:24 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 784cf51c7bf1b523-OSL
access-control-allow-origin: *
age: 3245706
cache-control: public, max-age=0, s-maxage=31536000
etag: W/"b53a6397d019b70fececb82492655050"
last-modified: Tue, 29 Nov 2022 00:34:45 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
cf-cache-status: HIT
cache-tag: 07071A28-2099-0596-6DA4-8CCD9C580290
capi-worker-type: dedicated
content-security-policy: default-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; connect-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; font-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; frame-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; img-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn data:; script-src 'self' 'unsafe-inline' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; style-src 'self' 'unsafe-inline' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn;
permissions-policy: accelerometer=*, autoplay=*, camera=*, display-capture=*, document-domain=*, encrypted-media=*, fullscreen=*, geolocation=*, gyroscope=*, midi=*, payment=*, picture-in-picture=*, sync-xhr=*, usb=*
x-amz-id-2: VFWr2dIownVb06CEwEpTzz8hVm1XJ0q2VuGBOTf/3wzanPgtoNnfVnORAI9z8CJ+MsK4ffXUqh0=
x-amz-request-id: 04AZZKYX1TXPARW9
x-amz-version-id: yBgDY9XyMTtOjrhKLRWtm3ZpjfHlVjqf
set-cookie: __cf_bm=PN5f8vYLmBRIE1W3VxFjVIyMA.Q96ONcq1hRsAzjaM8-1672929504-0-AWClWA+nEppdyskQBY8e3/+xemmi+PnkUGk/U2z8SV1tFjn8wvcc7Ohc/dRGRBOdCOgsHTic7B/dVCMnOBn55F0=; path=/; expires=Thu, 05-Jan-23 15:08:24 GMT; domain=.arkoselabs.com; HttpOnly; Secure; SameSite=None
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
client-api.arkoselabs.com/cdn/fc/js/39eca341811c50f1f573c72f14bd5612e0f6cd3c/standard/funcaptcha_api.js?onload=loadChallenge
200 OK 0 B URL HTTP/2 client-api.arkoselabs.com/cdn/fc/js/39eca341811c50f1f573c72f14bd5612e0f6cd3c/standard/funcaptcha_api.js?onload=loadChallenge
IP
GET /cdn/fc/js/39eca341811c50f1f573c72f14bd5612e0f6cd3c/standard/funcaptcha_api.js?onload=loadChallenge HTTP/1.1
Host: client-api.arkoselabs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://client-api.arkoselabs.com/v2/07071A28-2099-0596-6DA4-8CCD9C580290/enforcement.441f150ee6a4514242b1ad2a4aef188a.html
Connection: keep-alive
Cookie: __cf_bm=PN5f8vYLmBRIE1W3VxFjVIyMA.Q96ONcq1hRsAzjaM8-1672929504-0-AWClWA+nEppdyskQBY8e3/+xemmi+PnkUGk/U2z8SV1tFjn8wvcc7Ohc/dRGRBOdCOgsHTic7B/dVCMnOBn55F0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 05 Jan 2023 14:38:25 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 784cf51fbff9b523-OSL
access-control-allow-origin: *
age: 2432844
cache-control: public, max-age=31536000, immutable
etag: W/"4ac379250a466df7bf4391741a1a2a15"
last-modified: Thu, 08 Dec 2022 09:34:02 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: HIT
x-amz-id-2: uhYAkMqt05hRqA51R+e2x/FFSnV8bMzOTZhqRMpD/vRLT0ozXAyuSu2Iu9NFuOovNlb18n+rxkM=
x-amz-request-id: KE8AHSJQPXS6V8DM
x-amz-version-id: 3M4iV1x9UtK1OIolgZrPk9nVq3dV.Ptr
vary: Accept-Encoding
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
www.dropbox.com/pithos/host%3Aconsent.dropbox.com/privacy_consent_service
200 OK 0 B URL HTTP/2 www.dropbox.com/pithos/host%3Aconsent.dropbox.com/privacy_consent_service
IP
GET /pithos/host%3Aconsent.dropbox.com/privacy_consent_service HTTP/1.1
Host: www.dropbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://consent.dropbox.com/
Connection: keep-alive
Cookie: gvc=MTc0OTQwNjEwNDM3OTA0ODMxNjI5MDM3NDM3OTc5NzQzNDQyNjMy; t=OWC6eiSugIE2gyJOY_ylsmNr; __Host-js_csrf=OWC6eiSugIE2gyJOY_ylsmNr; locale=en; __Host-logged-out-session=ChB0Idb2KtyV7c2eVnOPuBmGEN7B250GGi5BRllENWpSQzEydzNwRHBCVVlnTm51VFNGeGVrQnR6TlZYN0NyT2hudHRrekNn
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,no-cache, no-store
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-WNVYOatRrKo/D0xydCSs' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-WNVYOatRrKo/D0xydCSs' 'nonce-yOXtxnYJW7Dvo9q/28XC'
referrer-policy: strict-origin-when-cross-origin
set-cookie: t=OWC6eiSugIE2gyJOY_ylsmNr; Domain=dropbox.com; expires=Sun, 04 Jan 2026 14:38:25 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=OWC6eiSugIE2gyJOY_ylsmNr; expires=Sun, 04 Jan 2026 14:38:25 GMT; Path=/; SameSite=None; Secure
__Host-ss=OOGlJGr-MA; expires=Sun, 04 Jan 2026 14:38:25 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-server-response-time: 27
x-xss-protection: 1; mode=block
content-type: text/javascript; charset=UTF-8
date: Thu, 05 Jan 2023 14:38:25 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 5bbdf30747394486a099e9a0e55aa25c
X-Firefox-Spdy: h2
www.dropbox.com/pithos/marketing_tracker_client,ux_analytics,hellosign_marketing_utils,privacy_consent
307 Temporary Redirect 0 B URL HTTP/2 www.dropbox.com/pithos/marketing_tracker_client,ux_analytics,hellosign_marketing_utils,privacy_consent
IP
GET /pithos/marketing_tracker_client,ux_analytics,hellosign_marketing_utils,privacy_consent HTTP/1.1
Host: www.dropbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.hellofax.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
cache-control: no-cache,no-cache, no-store
content-security-policy: sandbox
location: https://www.dropbox.com/pithos/host%3Aapp.hellofax.com/marketing_tracker_client%2Cux_analytics%2Chellosign_marketing_utils%2Cprivacy_consent
referrer-policy: strict-origin-when-cross-origin
set-cookie: gvc=MTc0OTQwNjEwNDM3OTA0ODMxNjI5MDM3NDM3OTc5NzQzNDQyNjMy; expires=Tue, 04 Jan 2028 14:38:22 GMT; HttpOnly; Path=/; SameSite=None; Secure
t=OWC6eiSugIE2gyJOY_ylsmNr; Domain=dropbox.com; expires=Sun, 04 Jan 2026 14:38:22 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=OWC6eiSugIE2gyJOY_ylsmNr; expires=Sun, 04 Jan 2026 14:38:22 GMT; Path=/; SameSite=None; Secure
__Host-ss=OOGlJGr-MA; expires=Sun, 04 Jan 2026 14:38:22 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
locale=en; Domain=dropbox.com; expires=Tue, 04 Jan 2028 14:38:22 GMT; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
content-type: text/html; charset=utf-8
date: Thu, 05 Jan 2023 14:38:22 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 84aa747f71814f74a9ef7a51a515ade7
X-Firefox-Spdy: h2
cdn.hellosign.com/1.140.0/build/jquery3.js
200 OK 0 B URL HTTP/2 cdn.hellosign.com/1.140.0/build/jquery3.js
IP
GET /1.140.0/build/jquery3.js HTTP/1.1
Host: cdn.hellosign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.hellofax.com
Connection: keep-alive
Referer: https://app.hellofax.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: https://app.hellofax.com
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
last-modified: Thu, 15 Dec 2022 22:16:20 GMT
x-amz-version-id: AseTJsDwboCdKlCFVN9HVxFuPlg.OhDL
server: AmazonS3
content-encoding: br
date: Thu, 05 Jan 2023 07:44:26 GMT
etag: W/"7bd5a837d052382bf3e99ad234e8e988"
vary: Accept-Encoding,Origin,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: f0SR6JKruTaTAFfJL6ncEEtQ86UvHTEI8sYg9Eg91PNbMP0TIQUApg==
age: 24837
X-Firefox-Spdy: h2
cdn.hellosign.com/1.140.0/build/common.js
200 OK 0 B URL HTTP/2 cdn.hellosign.com/1.140.0/build/common.js
IP
GET /1.140.0/build/common.js HTTP/1.1
Host: cdn.hellosign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.hellofax.com
Connection: keep-alive
Referer: https://app.hellofax.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: https://app.hellofax.com
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
last-modified: Thu, 15 Dec 2022 22:16:19 GMT
x-amz-version-id: VhFzFchdQi411x7asR2cMEIDaU_O2nXs
server: AmazonS3
content-encoding: br
date: Thu, 05 Jan 2023 07:44:26 GMT
etag: W/"c223357abc9905af0bd004b718c61225"
vary: Accept-Encoding,Origin,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BMeJE_VZ7N57-xmkqBngd3-qHXkvoHlTACe5tUL8gvMG4eyPlC1wSg==
age: 24837
X-Firefox-Spdy: h2
cfl.dropboxstatic.com/static/metaserver/static/pithos/privacy_consent.bundle-vflI8ZUCf.js
200 OK 0 B URL HTTP/2 cfl.dropboxstatic.com/static/metaserver/static/pithos/privacy_consent.bundle-vflI8ZUCf.js
IP
GET /static/metaserver/static/pithos/privacy_consent.bundle-vflI8ZUCf.js HTTP/1.1
Host: cfl.dropboxstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app.hellofax.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 05 Jan 2023 14:38:24 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Tue, 20 Dec 2022 08:52:44 GMT
x-dropbox-request-id: 2bb78e657fc90cefd800677024a2b164
x-content-type-options: nosniff
x-cached: HIT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public, immutable
access-control-allow-origin: *
timing-allow-origin: https://www.dropbox.com
cf-cache-status: HIT
age: 1373015
server: cloudflare
cf-ray: 784cf51c0b7bb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cfl.dropboxstatic.com/static/metaserver/static/pithos/hellosign_marketing_utils.bundle-vflDC3y9P.js
200 OK 0 B URL HTTP/2 cfl.dropboxstatic.com/static/metaserver/static/pithos/hellosign_marketing_utils.bundle-vflDC3y9P.js
IP
GET /static/metaserver/static/pithos/hellosign_marketing_utils.bundle-vflDC3y9P.js HTTP/1.1
Host: cfl.dropboxstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app.hellofax.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 05 Jan 2023 14:38:24 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Fri, 09 Dec 2022 03:43:35 GMT
x-dropbox-request-id: a16838cc6bb131bdb1b0df518f129635
x-content-type-options: nosniff
x-cached: HIT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public, immutable
access-control-allow-origin: *
timing-allow-origin: https://www.dropbox.com
cf-cache-status: HIT
age: 2322292
server: cloudflare
cf-ray: 784cf51c2ba0b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.dropbox.com/pithos/host%3Amarketing.hellofax.com/marketing_tracker_service
200 OK 0 B URL HTTP/2 www.dropbox.com/pithos/host%3Amarketing.hellofax.com/marketing_tracker_service
IP
GET /pithos/host%3Amarketing.hellofax.com/marketing_tracker_service HTTP/1.1
Host: www.dropbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://marketing.hellofax.com/
Connection: keep-alive
Cookie: gvc=MTc0OTQwNjEwNDM3OTA0ODMxNjI5MDM3NDM3OTc5NzQzNDQyNjMy; t=OWC6eiSugIE2gyJOY_ylsmNr; __Host-js_csrf=OWC6eiSugIE2gyJOY_ylsmNr; locale=en; __Host-logged-out-session=ChB0Idb2KtyV7c2eVnOPuBmGEN7B250GGi5BRllENWpSQzEydzNwRHBCVVlnTm51VFNGeGVrQnR6TlZYN0NyT2hudHRrekNn
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,no-cache, no-store
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-WNVYOatRrKo/D0xydCSs' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-WNVYOatRrKo/D0xydCSs' 'nonce-yOXtxnYJW7Dvo9q/28XC'
referrer-policy: strict-origin-when-cross-origin
set-cookie: t=OWC6eiSugIE2gyJOY_ylsmNr; Domain=dropbox.com; expires=Sun, 04 Jan 2026 14:38:25 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=OWC6eiSugIE2gyJOY_ylsmNr; expires=Sun, 04 Jan 2026 14:38:25 GMT; Path=/; SameSite=None; Secure
__Host-ss=OOGlJGr-MA; expires=Sun, 04 Jan 2026 14:38:25 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-server-response-time: 47
x-xss-protection: 1; mode=block
content-type: text/javascript; charset=UTF-8
date: Thu, 05 Jan 2023 14:38:25 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: f92768fa112542e084441c5070c51ffa
X-Firefox-Spdy: h2
cdn.hellosign.com/1.140.0/build/hellosign.js
200 OK 0 B URL HTTP/2 cdn.hellosign.com/1.140.0/build/hellosign.js
IP
GET /1.140.0/build/hellosign.js HTTP/1.1
Host: cdn.hellosign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.hellofax.com
Connection: keep-alive
Referer: https://app.hellofax.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: https://app.hellofax.com
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
last-modified: Thu, 15 Dec 2022 22:16:20 GMT
x-amz-version-id: 02vtY22SZ2gaWRftrDc8rz7n9zy5Ktsy
server: AmazonS3
content-encoding: br
date: Thu, 05 Jan 2023 07:44:26 GMT
etag: W/"b98e13b0845cb1a5f2088edc99fc3438"
vary: Accept-Encoding,Origin,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Gv6AEL_DW4yN9AVYu5tQUMy2prsnsZcXbLQcVUnJZn6fF5pVqFhYqg==
age: 24837
X-Firefox-Spdy: h2
cfl.dropboxstatic.com/static/metaserver/static/pithos/ux_analytics.bundle-vflCEk11y.js
200 OK 0 B URL HTTP/2 cfl.dropboxstatic.com/static/metaserver/static/pithos/ux_analytics.bundle-vflCEk11y.js
IP
GET /static/metaserver/static/pithos/ux_analytics.bundle-vflCEk11y.js HTTP/1.1
Host: cfl.dropboxstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app.hellofax.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 05 Jan 2023 14:38:24 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 04 Jan 2023 00:59:06 GMT
x-dropbox-request-id: d4c6505f1b475de2c3eafe75c02027f5
x-content-type-options: nosniff
x-cached: HIT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public, immutable
access-control-allow-origin: *
timing-allow-origin: https://www.dropbox.com
cf-cache-status: HIT
age: 77079
server: cloudflare
cf-ray: 784cf51c2bb3b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.hellosign.com/1.140.0/build/hellosign.css
200 OK 0 B URL HTTP/2 cdn.hellosign.com/1.140.0/build/hellosign.css
IP
GET /1.140.0/build/hellosign.css HTTP/1.1
Host: cdn.hellosign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.hellofax.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
last-modified: Thu, 15 Dec 2022 22:16:20 GMT
x-amz-version-id: 7a95cG8V5VLJ.SUf8IRDEcCC6robio2A
server: AmazonS3
content-encoding: br
date: Wed, 04 Jan 2023 19:41:11 GMT
etag: W/"592231eaeb758261a83c9773aaff9eef"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9DAsu6KHLzGH25zuiEU4dzULADPMfuskDo-_TVSVWGV4ny3If-VCNA==
age: 68232
X-Firefox-Spdy: h2
cfl.dropboxstatic.com/static/metaserver/static/pithos/marketing_tracker_client.bundle-vflJg7JaT.js
200 OK 0 B URL HTTP/2 cfl.dropboxstatic.com/static/metaserver/static/pithos/marketing_tracker_client.bundle-vflJg7JaT.js
IP
GET /static/metaserver/static/pithos/marketing_tracker_client.bundle-vflJg7JaT.js HTTP/1.1
Host: cfl.dropboxstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://app.hellofax.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 05 Jan 2023 14:38:24 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Fri, 09 Dec 2022 03:43:35 GMT
x-dropbox-request-id: ac17540499f16269d93de3d16a3df7e6
x-content-type-options: nosniff
x-cached: HIT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public, immutable
access-control-allow-origin: *
timing-allow-origin: https://www.dropbox.com
cf-cache-status: HIT
age: 2322292
server: cloudflare
cf-ray: 784cf51c1b94b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
tags.tiqcdn.com/utag/dropbox/hellosign/prod/utag.js
200 OK 0 B URL HTTP/2 tags.tiqcdn.com/utag/dropbox/hellosign/prod/utag.js
IP
GET /utag/dropbox/hellosign/prod/utag.js HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marketing.hellofax.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "4722287e48798bfee99647bd5e4457a2:1671229867.982792"
last-modified: Fri, 16 Dec 2022 22:31:08 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Thu, 05 Jan 2023 14:43:26 GMT
date: Thu, 05 Jan 2023 14:38:26 GMT
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/4551770/domain/marketing.hellofax.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/4551770/domain/marketing.hellofax.com/token
IP
GET /partner/4551770/domain/marketing.hellofax.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://marketing.hellofax.com
Connection: keep-alive
Referer: https://marketing.hellofax.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
date: Thu, 05 Jan 2023 12:42:44 GMT
access-control-allow-origin: *
cache-control: public, max-age=35656
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ioA-zmGmyZTseB6jLeoFiLYKjJm_u6jkuXVC23hsWjx35piEjeghFQ==
age: 6942
X-Firefox-Spdy: h2
52.55.144.29
15.188.95.229
104.16.100.29
23.61.215.237
23.36.76.122
93.184.220.29